What is the CVSS score of CVE-2025-40591?

CVE-2025-40591 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Siemens are affected by CVE-2025-40591?

RUGGEDCOM ROX industrial network devices across 11 product variants contain a critical authentication bypass vulnerability allowing authenticated users to execute arbitrary commands with root…

How to fix or mitigate CVE-2025-40591?

Within 24 hours: Inventory all RUGGEDCOM ROX devices in production and identify those running versions below V2.16.5; restrict web interface access to trusted administrative networks only. Within 7 days: Disable the 'Log Viewers' tool in the web interface if operationally feasible; implement enhanced monitoring for suspicious log access patterns and file system queries. Within 30 days: Monitor vendor security advisories for patch V2.16.5 release; develop and test patch deployment procedures; evaluate network segmentation to isolate affected devices from general corporate networks.

Siemens CVE-2025-40591

EUVD-2025-17713 HIGH

Client-Side Enforcement of Server-Side Security (CWE-602)

2025-06-10 productcert@siemens.com

Command Injection Siemens RCE Information Disclosure Privilege Escalation Authentication Bypass

7.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 19:49 euvd

EUVD-2025-17713

Analysis Generated

Mar 14, 2026 - 19:49 vuln.today

CVE Published

Jun 10, 2025 - 16:15 nvd

HIGH 7.7

DescriptionCVE.org

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM ROX RX1501 (All versions < V2.16.5), RUGGEDCOM ROX RX1510 (All versions < V2.16.5), RUGGEDCOM ROX RX1511 (All versions < V2.16.5), RUGGEDCOM ROX RX1512 (All versions < V2.16.5), RUGGEDCOM ROX RX1524 (All versions < V2.16.5), RUGGEDCOM ROX RX1536 (All versions < V2.16.5), RUGGEDCOM ROX RX5000 (All versions < V2.16.5). The 'Log Viewers' tool in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated remote attacker to execute the 'tail' command with root privileges and disclose contents of all files in the filesystem.