Known vulnerabilities in RUGGEDCOM ROX RX5000

Vendor: Siemens
Software: RUGGEDCOM ROX RX5000
Software CPE: cpe:2.3:h:siemens:ruggedcom_rox_rx5000:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 32
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting RUGGEDCOM ROX RX5000 RUGGEDCOM ROX RX5000 is affected by 32 known vulnerabilities: 2 high, 14 medium, 16 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109891 - Client-Side Enforcement of Server-Side Security
CVE-2025-33025		 CWE-602 Medium
No
No
 2.16.5 28.05.2025 SB2025052816
#VU109890 - Client-Side Enforcement of Server-Side Security
CVE-2025-33024		 CWE-602 Medium
No
No
 2.16.5 28.05.2025 SB2025052816
#VU109889 - Client-Side Enforcement of Server-Side Security
CVE-2025-32469		 CWE-602 Medium
No
No
 2.16.5 28.05.2025 SB2025052816
#VU101791 - Cross-Site Request Forgery (CSRF)
CVE-2020-28398		 CWE-352 Low
No
No
 2.16.0 16.12.2024 SB2024121625
#VU78322 - Command injection
CVE-2023-36755		 CWE-77 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78321 - Command injection
CVE-2023-36754		 CWE-77 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78320 - Command injection
CVE-2023-36753		 CWE-77 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78319 - Command injection
CVE-2023-36752		 CWE-77 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78318 - Command injection
CVE-2023-36751		 CWE-77 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78317 - Command injection
CVE-2023-36750		 CWE-77 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78316 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-36749		 CWE-327 Medium
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78315 - Inadequate Encryption Strength
CVE-2023-36748		 CWE-326 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78314 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36390		 CWE-79 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36389		 CWE-79 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78312 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36386		 CWE-79 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78311 - Improper input validation
CVE-2022-29562		 CWE-20 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU78310 - Cross-Site Request Forgery (CSRF)
CVE-2022-29561		 CWE-352 Low
No
No
 2.16.0 17.07.2023 SB2023071731
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 2.16.0 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903		 CWE-122 High
No
No
 2.16.0 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946		 CWE-319 Medium
No
No
 2.16.0 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more


Showing elements 1 - 20 out of 32