{"schema_version":1,"title":"Siemens RUGGEDCOM ROX RX1536 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 4 vulnerabilities in Siemens RUGGEDCOM ROX RX1536: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2025-40949, was published on 12 May 2026.","url":"https://junglewise.ai/threats/technologies/ruggedcom-rox-rx1536","json_url":"https://junglewise.ai/threats/technologies/ruggedcom-rox-rx1536.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/ruggedcom-rox-rx1536","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":3,"all_time":4,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":3},"latest":[{"cve":"CVE-2025-40949","cvss":9.1,"epss":0.0054,"slug":"cve-2025-40949-siemens-ruggedcom-rox-command-injection-in-scheduler-web-ui","title":"Siemens RUGGEDCOM ROX command injection in Scheduler Web UI","severity":"critical","exploited":false,"published_at":"2026-05-12T10:16:43.36+00:00","url":"https://junglewise.ai/threats/cve-2025-40949-siemens-ruggedcom-rox-command-injection-in-scheduler-web-ui"},{"cve":"CVE-2025-40948","cvss":6.8,"epss":0.0029,"slug":"cve-2025-40948-siemens-ruggedcom-rox-argument-injection-in-json-rpc-interface","title":"Siemens RUGGEDCOM ROX argument injection in JSON-RPC interface","severity":"high","exploited":false,"published_at":"2026-05-12T10:16:43.203+00:00","url":"https://junglewise.ai/threats/cve-2025-40948-siemens-ruggedcom-rox-argument-injection-in-json-rpc-interface"},{"cve":"CVE-2025-40947","cvss":7.5,"epss":0.0043,"slug":"cve-2025-40947-siemens-ruggedcom-rox-command-injection-in-feature-key","title":"Siemens RUGGEDCOM ROX command injection in feature key installation","severity":"high","exploited":false,"published_at":"2026-05-12T10:16:43.053+00:00","url":"https://junglewise.ai/threats/cve-2025-40947-siemens-ruggedcom-rox-command-injection-in-feature-key"},{"cve":"CVE-2019-13103","cvss":7.1,"slug":"cve-2019-13103-denx-u-boot-infinite-recursion-in-dos-partition-table-parsing","title":"Denx U-Boot infinite recursion in DOS partition table parsing","severity":"high","exploited":false,"published_at":"2019-07-29T15:15:12.39+00:00","url":"https://junglewise.ai/threats/cve-2019-13103-denx-u-boot-infinite-recursion-in-dos-partition-table-parsing"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","slug":"simatic-s7-1500-cpu-1518-4-pn-dp-mfp","vulnerabilities":204,"url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-1518-4-pn-dp-mfp"},{"name":"Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","slug":"simatic-s7-1500-cpu-1518f-4-pn-dp-mfp","vulnerabilities":83,"url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-1518f-4-pn-dp-mfp"},{"name":"Siemens SIMATIC CN 4100","slug":"simatic-cn-4100","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/simatic-cn-4100"},{"name":"Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","slug":"siplus-s7-1500-cpu-1518-4-pn-dp-mfp","vulnerabilities":70,"url":"https://junglewise.ai/threats/technologies/siplus-s7-1500-cpu-1518-4-pn-dp-mfp"},{"name":"Siemens RUGGEDCOM APE1808","slug":"ruggedcom-ape1808","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/ruggedcom-ape1808"},{"name":"Siemens RUGGEDCOM RST2428P","slug":"ruggedcom-rst2428p","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/ruggedcom-rst2428p"},{"name":"Siemens ROX II","slug":"rox-ii","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/rox-ii"},{"name":"Siemens SINEC OS","slug":"sinec-os","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/sinec-os"},{"name":"Siemens Solid Edge","slug":"solid-edge","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/solid-edge"},{"name":"Siemens SIMATIC S7-1500 TM MFP GNU/Linux subsystem","slug":"simatic-s7-1500-tm-mfp-gnu-linux-subsystem","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-tm-mfp-gnu-linux-subsystem"},{"name":"Siemens Ruggedcom Rox II","slug":"ruggedcom-rox-ii","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/ruggedcom-rox-ii"},{"name":"Siemens Reyrolle 7SR5","slug":"reyrolle-7sr5","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/reyrolle-7sr5"}],"technology":{"hub":true,"name":"Siemens RUGGEDCOM ROX RX1536","slug":"ruggedcom-rox-rx1536","vendor":{"name":"Siemens","slug":"siemens","url":"https://junglewise.ai/threats/vendors/siemens"},"aliases":[],"category":"firmware","homepage":"https://www.siemens.com/ruggedcom","description":"Operating system firmware for the RUGGEDCOM RX1536 rack-mounted managed layer 2 and layer 3 switch and router.","url":"https://junglewise.ai/threats/technologies/ruggedcom-rox-rx1536"},"most_severe":[{"cve":"CVE-2025-40949","cvss":9.1,"epss":0.0054,"slug":"cve-2025-40949-siemens-ruggedcom-rox-command-injection-in-scheduler-web-ui","title":"Siemens RUGGEDCOM ROX command injection in Scheduler Web UI","severity":"critical","exploited":false,"published_at":"2026-05-12T10:16:43.36+00:00","url":"https://junglewise.ai/threats/cve-2025-40949-siemens-ruggedcom-rox-command-injection-in-scheduler-web-ui"},{"cve":"CVE-2025-40947","cvss":7.5,"epss":0.0043,"slug":"cve-2025-40947-siemens-ruggedcom-rox-command-injection-in-feature-key","title":"Siemens RUGGEDCOM ROX command injection in feature key installation","severity":"high","exploited":false,"published_at":"2026-05-12T10:16:43.053+00:00","url":"https://junglewise.ai/threats/cve-2025-40947-siemens-ruggedcom-rox-command-injection-in-feature-key"},{"cve":"CVE-2019-13103","cvss":7.1,"slug":"cve-2019-13103-denx-u-boot-infinite-recursion-in-dos-partition-table-parsing","title":"Denx U-Boot infinite recursion in DOS partition table parsing","severity":"high","exploited":false,"published_at":"2019-07-29T15:15:12.39+00:00","url":"https://junglewise.ai/threats/cve-2019-13103-denx-u-boot-infinite-recursion-in-dos-partition-table-parsing"},{"cve":"CVE-2025-40948","cvss":6.8,"epss":0.0029,"slug":"cve-2025-40948-siemens-ruggedcom-rox-argument-injection-in-json-rpc-interface","title":"Siemens RUGGEDCOM ROX argument injection in JSON-RPC interface","severity":"high","exploited":false,"published_at":"2026-05-12T10:16:43.203+00:00","url":"https://junglewise.ai/threats/cve-2025-40948-siemens-ruggedcom-rox-argument-injection-in-json-rpc-interface"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}