جزئیات آسیب‌پذیری
CVE-2025-49796
Siemens RUGGEDCOM ROX MX5000Siemens RUGGEDCOM ROX MX5000RESiemens RUGGEDCOM ROX RX1400Siemens RUGGEDCOM ROX RX1500Siemens RUGGEDCOM ROX RX1501Siemens RUGGEDCOM ROX RX1510
Libxml: type confusion leads to denial of service (dos)
CVSS 3.1
9.1بحرانی
شرح رسمی (انگلیسی)
A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.1بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (redhat) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Siemens | RUGGEDCOM ROX MX5000 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX MX5000RE | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1400 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1500 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1501 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1510 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1511 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1512 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1524 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1536 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX5000 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM RST2428P | v < V4.0 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳۵- https://access.redhat.com/errata/RHSA-2025:10630 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:10698 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:10699 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:11580 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:12098 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:12099 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:12199 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:12237 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:12239 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:12240 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:12241 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13267 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13335 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:15397 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:15827 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:15828 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:18217 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:18218 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:18219 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:18240 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:19020 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:19041 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:19046 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:19894 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:21913 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0934 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62549 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67857 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7519 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-49796 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2372385 issue-trackingx_refsource_REDHAT
- https://gitlab.gnome.org/GNOME/libxml2/-/issues/933
- https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html
- https://cert-portal.siemens.com/productcert/html/ssa-577017.html
- https://cert-portal.siemens.com/productcert/html/ssa-253495.html
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۳/۲۶
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۱۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- redhat
پیش‌بینی بهره‌برداری (EPSS)
۱٫۵۵٪
احتمال بهره‌برداری در ۳۰ روز
۷۵٫۳٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-125Out-of-bounds Read