CVE-2021-37174

8.8 highEPSS 1.2%

High (8.8) in siemens. EPSS 1.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The affected devices have a privilege escalation vulnerability, if exploited, an attacker could gain root user access.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-250
Published: 2021-09-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:ruggedcom_rox_mx5000_firmware
siemens:ruggedcom_rox_rx1400_firmware
siemens:ruggedcom_rox_rx1500_firmware
siemens:ruggedcom_rox_rx1501_firmware
siemens:ruggedcom_rox_rx1510_firmware
siemens:ruggedcom_rox_rx1511_firmware
siemens:ruggedcom_rox_rx1512_firmware
siemens:ruggedcom_rox_rx1524_firmware
siemens:ruggedcom_rox_rx1536_firmware
siemens:ruggedcom_rox_rx5000_firmware

References

Check your stack JSON