# CVE-2024-56836: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All…

Source: https://junglewise.ai/threats/cve-2024-56836-a-vulnerability-has-been-identified-in-ruggedcom-rox-mx5000-all  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-09  
License: CC BY 4.0 with a link back

CVE-2024-56836 · Severity: high · CVSS 7.5 · Published 2025-12-09

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All versions < V2.17.0), RUGGEDCOM ROX RX1536 (All versions < V2.17.0), RUGGEDCOM ROX RX5000 (All versions < V2.17.0). During the Dynamic DNS configuration of the affected product it is possible to inject additional configuration parameters. Under certain circumstances, an attacker could leverage this vulnerability to spawn a reverse shell and gain root access on the affected system.

Technologies: [Siemens RUGGEDCOM ROX II](https://junglewise.ai/threats/technologies/ruggedcom-rox-ii), [Siemens Ruggedcom Rox Ii Firmware](https://junglewise.ai/threats/technologies/ruggedcom-rox-ii-firmware). Vendors: [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2024-56836 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-56836 being exploited in the wild.

**How severe is CVE-2024-56836?** High severity, with a CVSS score of 7.5, published 9 December 2025.

**Which products and versions are affected?** Siemens RUGGEDCOM ROX II, Siemens Ruggedcom Rox Ii Firmware. The advisory does not name versions.

**Is there a fix for CVE-2024-56836?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2024-56836?** Check whether you run Siemens RUGGEDCOM ROX II or Siemens Ruggedcom Rox Ii Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Siemens RUGGEDCOM ROX II
- Siemens Ruggedcom Rox Ii Firmware

## Related threats

- [A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All…](https://junglewise.ai/threats/cve-2024-56840-a-vulnerability-has-been-identified-in-ruggedcom-rox-mx5000-all)
- [A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All…](https://junglewise.ai/threats/cve-2024-56839-a-vulnerability-has-been-identified-in-ruggedcom-rox-mx5000-all)
- [A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All…](https://junglewise.ai/threats/cve-2024-56838-a-vulnerability-has-been-identified-in-ruggedcom-rox-mx5000-all)
- [A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All…](https://junglewise.ai/threats/cve-2024-56837-a-vulnerability-has-been-identified-in-ruggedcom-rox-mx5000-all)
- [A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All…](https://junglewise.ai/threats/cve-2024-56835-a-vulnerability-has-been-identified-in-ruggedcom-rox-mx5000-all)