CyberzSOC

Applicability
← Back to CVE-2025-40591

CVE-2025-40591

Siemens

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

CVE List v5 (CNA container)
precedence 60 · revised 2025-06-10
11 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (11)

Product Status Versions Remediation Source
Siemens/RUGGEDCOM ROX MX5000 Siemens · RUGGEDCOM ROX MX5000 affected < V2.16.5 none available cve_cna
Siemens/RUGGEDCOM ROX MX5000RE Siemens · RUGGEDCOM ROX MX5000RE affected < V2.16.5 none available cve_cna
Siemens/RUGGEDCOM ROX RX1400 Siemens · RUGGEDCOM ROX RX1400 affected < V2.16.5 none available cve_cna
Siemens/RUGGEDCOM ROX RX1500 Siemens · RUGGEDCOM ROX RX1500 affected < V2.16.5 none available cve_cna
Siemens/RUGGEDCOM ROX RX1501 Siemens · RUGGEDCOM ROX RX1501 affected < V2.16.5 none available cve_cna
Siemens/RUGGEDCOM ROX RX1510 Siemens · RUGGEDCOM ROX RX1510 affected < V2.16.5 none available cve_cna
Siemens/RUGGEDCOM ROX RX1511 Siemens · RUGGEDCOM ROX RX1511 affected < V2.16.5 none available cve_cna
Siemens/RUGGEDCOM ROX RX1512 Siemens · RUGGEDCOM ROX RX1512 affected < V2.16.5 none available cve_cna
Siemens/RUGGEDCOM ROX RX1524 Siemens · RUGGEDCOM ROX RX1524 affected < V2.16.5 none available cve_cna
Siemens/RUGGEDCOM ROX RX1536 Siemens · RUGGEDCOM ROX RX1536 affected < V2.16.5 none available cve_cna
Siemens/RUGGEDCOM ROX RX5000 Siemens · RUGGEDCOM ROX RX5000 affected < V2.16.5 none available cve_cna

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.