Cyber·Monitoring
Shai-Hulud Supply-Chain Attack Trojanizes 19 PyPI Packages
PyPI repository (global online service)· Global4 Jun
5 reportsPROPCYCAS
MediumAI Refreshed
ClosedMedium impactAI Generated
Siemens Ruggedcom ROX OS Command Injection Vulnerability (CVE-2025-40947)
Occurred 12 May 2026·Detected 23 May 2026·
Worldwide – Siemens Ruggedcom ROX devices are deployed globally across critical infrastructure sectors; vendor headquarters in Germany.1 reportEnded 29 May 2026
Cyber
CISA has republished a Siemens ProductCERT advisory disclosing a critical OS command injection vulnerability (CVE-2025-40947) in Siemens Ruggedcom ROX industrial networking devices. The flaw exists in the feature key installation process and allows an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Eleven product lines running versions prior to 2.17.1 are affected. These devices are widely deployed in critical infrastructure sectors including critical manufacturing, energy, and utilities worldwide. Siemens has released version 2.17.1 as the remediation.
AI-generated from linked source reports. See our correction policy.
Impact verdict
Medium impact. MEDIUM: Second-pass historical recalibration. This cyber advisory or vulnerability item is relevant to Cyber and technology-dependent Property/Casualty books, but it does not evidence confirmed insured loss, claims activity, ransomware/business interruption, critical infrastructure outage, or quantified market impact sufficient for HIGH.
View assessment methodologyHow we grade what we know -- Known · Reported · Uncertain. Methodology →
Timeline
Status Change2 Jun 2026, 13:05
Lifecycle changed
monitoring → closed
Closure2 Jun 2026, 13:05
Event Closed
auto_closed_monitoring_timeout
Status Change29 May 2026, 05:30
Status changed to monitoring
Auto-transitioned: no updates for 6 hours
active → monitoring
Status Change28 May 2026, 22:34
Status changed to active
evidence_trigger: authoritative_fast_track
signal → active
De-escalation25 May 2026, 17:12
Impact changed
high → medium
Initial Detection23 May 2026, 21:28
Initial Detection
CISA has republished a Siemens ProductCERT advisory disclosing a critical OS command injection vulnerability (CVE-2025-40947) in Siemens Ruggedcom ROX industrial networking devices. The flaw exists in the feature key installation process and allows an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Eleven product lines running versions prior to 2.17.1 are affected. These devices are widely deployed in critical infrastructure sectors including critical manufacturing, energy, and utilities worldwide. Siemens has released version 2.17.1 as the remediation.
Affected devices do not properly sanitize user-supplied input during the feature key installation process. This could allow an authenticated remote attacker to inject arbitrary commands, resulting in remote code execution with root privileges on the underlying operating system.
Source: CISA Advisories (Official Advisory) · View source
Lloyd's classifications
Tracking this kind of risk? Get an email when Cyber events escalate.
Get alerts