Siemens Ruggedcom Rox Ii Firmware vulnerabilities

11 CVEs affecting Siemens Ruggedcom Rox Ii Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-56840, published 2025-12-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-5379, published 2018-02-19. Critical severity, CVSS 9.8. EPSS: 38.5% chance of exploitation in the next 30 days. The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A successful attack…
CVE-2018-5391, published 2018-09-06. High severity, CVSS 7.5. EPSS: 32.4% chance of exploitation in the next 30 days. The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service…
CVE-2018-5381, published 2018-02-19. High severity, CVSS 7.5. EPSS: 30.2% chance of exploitation in the next 30 days. The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an…
CVE-2018-5380, published 2018-02-19. Medium severity, CVSS 4.3. EPSS: 14.8% chance of exploitation in the next 30 days. The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.
CVE-2015-5537, published 2015-08-03. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext…
CVE-2024-56840, published 2025-12-09. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX…
CVE-2024-56839, published 2025-12-09. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX…
CVE-2024-56837, published 2025-12-09. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX…
CVE-2024-56835, published 2025-12-09. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX…
CVE-2024-56836, published 2025-12-09. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX…

Latest

CVE-2024-56838, published 2025-12-09. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX…