PT-2025-49831

CVE-2024-56840

·

Published

2025-12-09

·

Updated

2026-10-24

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions RUGGEDCOM ROX II versions prior to 2.17.0
Description The RUGGEDCOM ROX II family is affected by an issue where, under certain conditions, IPsec may allow code injection. This could allow an attacker to execute arbitrary code as a root user.
Recommendations Update to version 2.17.0 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')
Related identifiers
CVE-2024-56840
BDU:2025-15630
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com