Siemens RUGGEDCOM CROSSBOW

🗓️ 14 May 2024 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 31 Views

Siemens RUGGEDCOM CROSSBOW CISA no longer updates security advisories after initial, high-severity vulnerabilities found, like SQL Injection and Missing Auth

Reporter	Title	Published	Views	Family All 92
BDU FSTEC	The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system, related to the lack of protection for operational data, allows a intruder to gain unauthorized access to confidential information.	24 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system allows a intruder to re-record any files in the system.	24 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Firmware Upload Handler component of the Siemens RUGGEDCOM CROSSBOW secure access control system allows a perpetrator to upload arbitrary files and execute arbitrary code.	24 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Firmware Upload Handler component of the Siemens RUGGEDCOM CROSSBOW secure access control system allows a perpetrator to upload arbitrary files and execute arbitrary code.	24 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Siemens RUGGEDCOM CROSSBOW secure access control system allows a intruder to execute arbitrary code.	17 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system lies in the lack of authentication for a critical function, allowing attackers to trigger a service failure.	25 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Firmware Upload Handler component of the Siemens RUGGEDCOM CROSSBOW secure access control system allows a perpetrator to upload arbitrary files and execute arbitrary code.	25 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system lies in the lack of protection for the SQL query structure, allowing attackers to execute arbitrary SQL queries against the database.	25 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system lies in the lack of protection for the SQL query structure, allowing attackers to execute arbitrary SQL queries.	26 Nov 202400:00	–	bdu_fstec
CNNVD	Siemens RUGGEDCOM CROSSBOW 信息泄露漏洞	14 May 202400:00	–	cnnvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-916916.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-916916.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-916916.pdf
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-916916.txt
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-137-10.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-137-10
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

14 May 2024 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS 3.19.8

EPSS0.02608

SSVC