CVE-2023-36748

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The affected devices are configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over to and from the affected device.

• CWE-326
• CWE-326

• https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdfVendor Advisory

Published

Jul 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-36742Visual Studio Code Remote Code Execution Vulnerability7.8
• CVE-2023-36743Win32k Elevation of Privilege Vulnerability7.8
• CVE-2023-36744Microsoft Exchange Server Remote Code Execution Vulnerabilit…8
• CVE-2023-36745Microsoft Exchange Server Remote Code Execution Vulnerabilit…8
• CVE-2023-36746Multiple heap-based buffer overflow vulnerabilities exist in…7.8
• CVE-2023-36747Multiple heap-based buffer overflow vulnerabilities exist in…7.8
• CVE-2023-36749A vulnerability has been identified in RUGGEDCOM ROX MX5000 …7.4
• CVE-2023-3675Improper Limitation of a Pathname to a Restricted Directory …6.5
• CVE-2023-36750A vulnerability has been identified in RUGGEDCOM ROX MX5000 …7.2
• CVE-2023-36751A vulnerability has been identified in RUGGEDCOM ROX MX5000 …7.2
• CVE-2023-36752A vulnerability has been identified in RUGGEDCOM ROX MX5000 …7.2
• CVE-2023-36753A vulnerability has been identified in RUGGEDCOM ROX MX5000 …7.2