Ctrl + K
/ news / CVE
CVE•Published 2026-05-12•Modified 2026-06-29•1 article on news•4 live references•NVD data

CVE-2025-40949Siemens · Ruggedcom_rox_mx5000_firmware

Vulnerability data via NVD (ingested)

CVSS v3.1
9.1
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS percentile
41
Exploit Prediction Scoring System · top 59% of all CVEs
Weaknesses (CWE)
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Description

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All versions < V2.17.1), RUGGEDCOM ROX RX1536 (All versions < V2.17.1), RUGGEDCOM ROX RX5000 (All versions < V2.17.1). Affected devices do not properly sanitize user-supplied input in the Scheduler functionality of the Web UI, allowing commands to be injected into the task scheduling backend. This could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system.

Timeline
Published 2026-05-12
Modified 2026-06-29

External references

NVDMITREExploit-DBVulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts
vuln:CVE-2025-40949
Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · OS
os:"Ruggedcom Rox Mx5000 Firmware"
Hosts Shodan identified as running Ruggedcom Rox Mx5000 Firmware.
More intel sources (5)
Shodan report
vuln:CVE-2025-40949
Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2025-40949
Censys host search filtered to this CVE id.
grep.app
CVE-2025-40949
Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2025-40949
GitHub code search for direct mentions.
Google dork
"CVE-2025-40949" exploit -site:nvd.nist.gov
Write-ups and news, NVD excluded.

Known PoCs on GitHub (1)

CVE-2025-409491 repo
maxgfr/awesome-starsunknown
List of repositories that I liked on Github
★ 22·updated today
Articles on news mentioning CVE-2025-40949