Siemens Ruggedcom Crossbow vulnerabilities, page 2
28 vulnerabilities
Known vulnerabilities in Siemens Ruggedcom Crossbow, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-27946siemensruggedcom crossbow
EPSS score0.91%
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). Downloading files overwrites files with the same name in the
installation directory of the affected systems. The filename for
the target file can be specified, thus arbitrary files can be
overwritten by an attacker with the required privileges.CVE-2023-37372siemensruggedcom crossbowEPSS score0.94%
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.CVE-2023-37373siemensruggedcom crossbowEPSS score0.54%
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages. An unauthenticated remote attacker could write arbitrary files to the affected application's file system.CVE-2023-27309siemensruggedcom crossbowEPSS score0.48%
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions for specific write queries. This could allow an authenticated remote attacker to perform unauthorized actions.CVE-2023-27411siemensruggedcom crossbowEPSS score0.80%
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges.CVE-2023-27463siemensruggedcom crossbowEPSS score0.80%
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.CVE-2023-27310siemensruggedcom crossbowEPSS score0.63%
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to otherwise non-privileged user accounts.CVE-2023-27462siemensruggedcom crossbowEPSS score0.52%
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails to check for proper permissions for specific read queries. This could allow authenticated remote attackers to access data they are not authorized for.