Siemens RUGGEDCOM ROX II Code Injection Vulnerability Allowing Root Access

A code injection vulnerability has been identified in the Siemens RUGGEDCOM ROX II family, affecting all versions prior to 2.17.0. The issue arises in the DHCP Server configuration file, where improper validation allows attackers to inject malicious code. Exploitation of this vulnerability could lead to the execution of a reverse shell, granting root access on the affected system.

Impact

Exploitation of this vulnerability allows for unauthorized code execution as the root user, potentially leading to complete control over the affected system.

Remediation

Users are advised to update to version 2.17.0 or later. Additional guidance can be found on the Siemens support portal.