Siemens Ruggedcom Rox RX5000 Firmware vulnerabilities

26 CVEs affecting Siemens Ruggedcom Rox RX5000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-40949, published 2026-05-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-25217, published 2021-05-26. High severity, CVSS 7.4. EPSS: 6.1% chance of exploitation in the next 30 days. In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life…
CVE-2019-17006, published 2020-10-22. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the…
CVE-2019-11745, published 2020-01-08. High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days. When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and…
CVE-2018-18508, published 2020-10-22. Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days. In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
CVE-2022-29560, published 2022-07-12. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < 2.15.1), RUGGEDCOM ROX MX5000RE (All versions < 2.15.1), RUGGEDCOM ROX RX1400 (All versions < 2.15.1), RUGGEDCOM ROX RX1500…
CVE-2021-37173, published 2021-09-14. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX…
CVE-2023-36754, published 2023-07-11. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX…
CVE-2023-36753, published 2023-07-11. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX…
CVE-2023-36752, published 2023-07-11. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX…
CVE-2023-36751, published 2023-07-11. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX…

Latest

CVE-2025-40949, published 2026-05-12. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX…
CVE-2025-40948, published 2026-05-12. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX…
CVE-2025-40947, published 2026-05-12. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX…
CVE-2023-36755, published 2023-07-11. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX…
CVE-2023-36750, published 2023-07-11. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX…
CVE-2023-36749, published 2023-07-11. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX…