CVE:CVE-2023-36750
CNNVD:CNNVD-202307-736
Siemens RUGGEDCOM ROX MX5000等都是德国西门子（Siemens）公司的产品。Siemens RUGGEDCOM ROX MX5000是一个通信设备。Siemens RUGGEDCOM ROX RX1500是一个通信设备。Siemens RUGGEDCOM ROX RX5000是一个通信设备。
Siemens RUGGEDCOM ROX 系列多款产品存在安全漏洞，该漏洞源于缺少服务器端输入验证，受影响设备的 Web 界面中的软件升级 Url 参数容易受到命令注入的攻击。这可能允许经过身份验证的特权远程攻击者以 root 权限执行任意代码。
solution:Upgrade siemens ruggedcom_rox_mx5000_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_mx5000re_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1400_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1500_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1501_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1510_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1511_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1512_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1524_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx1536_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade siemens ruggedcom_rox_rx5000_firmware to a higher version than 2.16.0,and avoid the version (,2.16.0)