RUGGEDCOM ROX EUVD-2025-209780

Immediately upgrade all affected RUGGEDCOM ROX devices to firmware version V2.17.1 or later as documented in Siemens ProductCERT Security Advisory SSA-078743 (https://cert-portal.siemens.com/productcert/html/ssa-078743.html). The patch addresses the command injection vulnerability in the feature key installation process through proper input sanitization. During upgrade planning, note that firmware updates on industrial network devices may require maintenance windows and operational coordination. As interim compensating controls until patching is complete: restrict network access to the management interface using firewall rules or access control lists to permit only authorized administrator IP addresses (eliminates network-based attack vector but requires strict IP management); implement multi-factor authentication if supported to raise the authentication barrier beyond PR:L (reduces likelihood of credential compromise); monitor and log all feature key installation attempts for anomalous activity (provides detection capability but does not prevent exploitation); consider disabling feature key installation functionality if not operationally required until patching (eliminates attack surface but may impact license management). For air-gapped OT networks, prioritize patching devices with any pathway to corporate networks or external connectivity.