// For flags

CVE-2025-33023

 

Severity Score

5.1
*CVSS v4

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track
*SSVC
Descriptions

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All versions), RUGGEDCOM ROX RX1501 (All versions), RUGGEDCOM ROX RX1510 (All versions), RUGGEDCOM ROX RX1511 (All versions), RUGGEDCOM ROX RX1512 (All versions), RUGGEDCOM ROX RX1524 (All versions), RUGGEDCOM ROX RX1536 (All versions), RUGGEDCOM ROX RX5000 (All versions). The affected devices do not properly enforce the restriction of files that can be uploaded from the web interface. This could allow an authenticated remote attacker with high privileges in the web interface to upload arbitrary files.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Attack Requirements
None
Privileges Required
High
User Interaction
None
System
Vulnerable | Subsequent
Confidentiality
None
None
Integrity
None
Low
Availability
None
None
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
Multiple
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:Track
Exploitation
None
Automatable
No
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2025-04-15 CVE Reserved
  • 2025-08-12 CVE Published
  • 2025-08-12 CVE Updated
  • 2025-08-18 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-434: Unrestricted Upload of File with Dangerous Type
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX MX5000
Search vendor "Siemens" for product "RUGGEDCOM ROX MX5000"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX MX5000" and version "0"
en
Affected
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX MX5000RE
Search vendor "Siemens" for product "RUGGEDCOM ROX MX5000RE"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX MX5000RE" and version "0"
en
Affected
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX RX1400
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1400"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1400" and version "0"
en
Affected
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX RX1500
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1500"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1500" and version "0"
en
Affected
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX RX1501
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1501"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1501" and version "0"
en
Affected
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX RX1510
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1510"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1510" and version "0"
en
Affected
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX RX1511
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1511"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1511" and version "0"
en
Affected
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX RX1512
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1512"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1512" and version "0"
en
Affected
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX RX1524
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1524"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1524" and version "0"
en
Affected
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX RX1536
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1536"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX RX1536" and version "0"
en
Affected
Siemens
Search vendor "Siemens"
 RUGGEDCOM ROX RX5000
Search vendor "Siemens" for product "RUGGEDCOM ROX RX5000"
 0
Search vendor "Siemens" for product "RUGGEDCOM ROX RX5000" and version "0"
en
Affected