CVE-2024-56839
Last modified
CVE-2024-56839 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All versions < V2.17.0), RUGGEDCOM ROX RX1536 (All versions < V2.17.0), RUGGEDCOM ROX RX5000 (All versions < V2.17.0). Code injection can be achieved when the affected device is using VRF (Virtual Routing and Forwarding). EPSS estimates a 0.57% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All versions < V2.17.0), RUGGEDCOM ROX RX1536 (All versions < V2.17.0), RUGGEDCOM ROX RX5000 (All versions < V2.17.0). Code injection can be achieved when the affected device is using VRF (Virtual Routing and Forwarding). An attacker could leverage this scenario to execute arbitrary code as root user.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Ruggedcom Rox Ii Firmware | < 2.17.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-56839?
How severe is CVE-2024-56839?
How do I fix CVE-2024-56839?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-5683Improper Control of Generation of Code ('Code Injection') vu…9.8
- CVE-2024-56830The Net::EasyTCP package 0.15 through 0.26 for Perl uses Per…5.4
- CVE-2024-56835A vulnerability has been identified in RUGGEDCOM ROX MX5000 …8.8
- CVE-2024-56836A vulnerability has been identified in RUGGEDCOM ROX MX5000 …8.8
- CVE-2024-56837A vulnerability has been identified in RUGGEDCOM ROX MX5000 …8.6
- CVE-2024-56838A vulnerability has been identified in RUGGEDCOM ROX MX5000 …8.6
- CVE-2024-5684An attacker with access to the private network (the charger …8.8
- CVE-2024-56840A vulnerability has been identified in RUGGEDCOM ROX MX5000 …7.5
- CVE-2024-56841A vulnerability has been identified in Mendix LDAP (All vers…9.1
- CVE-2024-5685Users with "User:edit" and "Self:api" permissions can promot…8.1
- CVE-2024-5686The WPZOOM Addons for Elementor (Templates, Widgets) plugin …5.4
- CVE-2024-5687If a specific sequence of actions is performed when opening …5.3
Are you affected by CVE-2024-56839?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST