CVE-2025-40591 is a high-severity command injection vulnerability affecting multiple Siemens RUGGEDCOM ROX devices running software versions prior to V2.16.5. An authenticated remote attacker can exploit a lack of server-side input sanitation in the 'Log Viewers' web interface tool to execute arbitrary 'tail' commands with root privileges, leading to the disclosure of sensitive file system contents. While the CVSS score is 7.7 (High), there is currently no public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Siemens | RUGGEDCOM ROX MX5000 | >= 0, < V2.16.5CNA affecteddefault unknown | |
| Siemens | RUGGEDCOM ROX MX5000RE | >= 0, < V2.16.5CNA affecteddefault unknown | |
| Siemens | RUGGEDCOM ROX RX1400 | >= 0, < V2.16.5CNA affecteddefault unknown | |
| Siemens | RUGGEDCOM ROX RX1500 | >= 0, < V2.16.5CNA affecteddefault unknown | |
| Siemens | RUGGEDCOM ROX RX1501 | >= 0, < V2.16.5CNA affecteddefault unknown |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.