Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

Unit 42 disclosed three chained zero-day vulnerabilities in Siemens ROX II OT switches that together enable local privilege escalation and persistent root access. The chain allows attackers to gain and maintain high-privilege control of affected switches, posing significant risk to industrial and critical infrastructure networks. Unit 42 provides technical details, indicators, and mitigation guidance; organizations should treat these as high-priority fixes and isolate/segregate affected devices until patched.