Ruggedcom Rox II Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

RR

Product

Ruggedcom Rox II Firmware

by Siemens · last CVE Dec 9, 2025

11

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 1High 8Medium 1Low 0

Severity

All severities11 Critical1 High8 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Ruggedcom Rox II Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-5379	9.8	38%	Feb 19	The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes Affected: before 2.13.0
CVE-2024-56836	8.8	0%	Dec 9	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions <… Affected: before 2.17.0
CVE-2024-56835	8.8	1%	Dec 9	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions <… Affected: before 2.17.0
CVE-2018-5391	7.5	32%	Sep 6	The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly Affected: before 2.13.3
CVE-2018-5381	7.5	30%	Feb 19	The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function Affected: before 2.13.0
CVE-2024-56840	7.2	1%	Dec 9	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions <… Affected: before 2.17.0
CVE-2024-56839	7.2	1%	Dec 9	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions <… Affected: before 2.17.0
CVE-2024-56838	7.2	0%	Dec 9	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions <… Affected: before 2.17.0
CVE-2024-56837	7.2	1%	Dec 9	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions <… Affected: before 2.17.0
CVE-2018-5380	4.3	15%	Feb 19	The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input Affected: before 2.13.0
CVE-2015-5537	–	1%	Aug 3	The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers… Affected: All versions, or not specified