CVE-2024-56839 A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGE

What is CVE-2024-56839?

CVE-2024-56839 is a high-severity vulnerability in Siemens RUGGEDCOM ROX MX5000, published on 9 Dec 2025.

Official description

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All versions < V2.17.0), RUGGEDCOM ROX RX1536 (All versions < V2.17.0), RUGGEDCOM ROX RX5000 (All versions < V2.17.0). Code injection can be achieved when the affected device is using VRF (Virtual Routing and Forwarding). An attacker could leverage this scenario to execute arbitrary code as root user.

Weakness: CWE-74

Which versions are affected by CVE-2024-56839?

It affects 1 product.

Products include Siemens Ruggedcom Rox Ii Firmware.

How do I fix CVE-2024-56839?

No fix has been published for CVE-2024-56839 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-56839 being exploited?

There is no known exploitation of CVE-2024-56839 in the wild and no public exploit code.

Other vulnerabilities in Siemens RUGGEDCOM ROX MX5000

• CVE-2024-56835 Code injection in RUGGEDCOM ROX MX5000 High 8.7
• CVE-2024-56837 Command injection in RUGGEDCOM ROX MX5000 High 8.6
• CVE-2024-56838 Code injection in RUGGEDCOM ROX MX5000 High 8.6
• CVE-2024-56836 Command injection in RUGGEDCOM ROX MX5000 High 7.7
• CVE-2024-56840 Code injection in RUGGEDCOM ROX MX5000 High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4xh8-gf5r-5x5p.