Siemens RUGGEDCOM ROX II Reverse Shell Vulnerability Allowing Root Access

A vulnerability exists in the Siemens RUGGEDCOM ROX II family, affecting all versions prior to 2.17.0. The issue arises from inadequate validation during the installation and loading of certain configuration files, which could allow an attacker to spawn a reverse shell and gain root access on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized root access on the affected system, allowing an attacker to execute arbitrary commands with elevated privileges.

Remediation

Users are advised to update to version 2.17.0 or later. Additional guidance can be found on the Siemens Industry Support website.