CVE-2015-5537: Siemens Ruggedcom Rox Ii Firmware

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566.

Affected products

• Siemens Ruggedcom Rox Ii Firmware: affected versions not specified
• Siemens Ruggedcom Rugged Operating System: before 4.2.0 (fixed in 4.2.0)

Published 2015-08-03. Last modified 2026-06-17.