RUGGEDCOM ROX vulnerabilities
3 known CVE vulnerabilities in RUGGEDCOM ROX, translated and rated.
- CVE-2025-40949Critical
A vulnerability in RUGGEDCOM ROX allows an authenticated remote attacker to inject commands into the task scheduler via the Web UI. Lack of proper input sanitization enables arbitrary command execution with root privileges.
- CVE-2025-40948Medium
A vulnerability in RUGGEDCOM ROX devices allows an authenticated remote attacker to read arbitrary files from the OS filesystem with root privileges. The issue stems from improper input validation in the web server's JSON-RPC interface.
- CVE-2025-40947High
A vulnerability in RUGGEDCOM ROX devices allows an authenticated remote attacker to inject arbitrary commands during feature key installation. Insufficient input sanitization leads to remote code execution with root privileges.