Three Steps To The Terminal: A Siemens ROX II Zero-Day Trilogy
Palo Alto Networks, Friday, July 17th, 2026
Unit 42 details three chained zero-days in Siemens ROX II OT switches that yield privilege escalation and persistent root access.
Unit 42 researchers published a technical analysis of three previously unknown vulnerabilities in Siemens ROX II operational technology switches.
Chained together, the flaws let an attacker escalate privileges and establish persistent root access on affected devices.
Because ROX II switches sit in industrial and critical-infrastructure networks, a compromise offers a foothold with significant downstream reach.
The writeup walks through the exploitation path step by step and covers detection and mitigation guidance for defenders running affected hardware.