Security News
긴급도 10/100 심각도 6.8 · 보통 악용확률 33.7% CWE-88

CVE-2025-40948

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All versions < V2.17.1), RUGGEDCOM ROX RX1536 (All versions < V2.17.1), RUGGEDCOM ROX RX5000 (All versions < V2.17.1). Affected devices do not properly validate input in the web server's JSON-RPC interface.

This could allow an authenticated remote attacker to read arbitrary files from the underlying operating system's filesystem with root privileges.
타임라인
  1. NVD 공개
  2. 첫 보도 Unit 42 · 위협 요약: NetScaler 제로데이 취약점 CVE-2026-88771 및 CVE-…
  3. 최근 보도 (총 3건) Unit 42 · 위협 요약: PHP의 심각한 취약점: CVE-2026-109618, CVE-2026-1…

벡터: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

NVD 상세 ↗   벤더 권고문 ↗   참고 링크 ↗

이 취약점을 다룬 기사 (3)

← 취약점 목록