unit42.paloaltonetworks.com· Jul 17, 2026· by Emmanuel Zhou, Adam Robbie, Rick Wyble and Miguel Pereira

Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

Open Original Article ↗
A technical analysis of three chained zero-day vulnerabilities in Siemens ROX II OT switches that allow privilege escalation and persistent root access. The post Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy appeared first on Unit 42.
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#Threat Research#Vulnerabilities#Command injection#CVE-2025-40947#CVE-2025-40948#CVE-2025-40949#Exploit Chain#privilege escalation