Skip to content
Threat Feed
Subscribe

Product

ROX II OT Switches

1 brief RSS
critical threat

Three Chained Zero-Days in Siemens ROX II OT Switches Lead to Root Access

Unit 42 and Siemens collaborated to disclose three critical chained zero-day vulnerabilities (CVE-2025-40948, CVE-2025-40947, CVE-2025-40949) in Siemens ROX II operational technology switches, allowing an attacker to achieve arbitrary file disclosure, privilege escalation to root, and persistent root-level code execution.

exploited ROX II OT switches industrial-control-systems ot-security zero-day privilege-escalation command-injection persistence siemens vulnerability-exploit
3r 4t 3c