CVE-2024-27944

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow a privileged user to upload firmware files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code...

CVE-2024-27944

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow a privileged user to upload firmware files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code...

CVE-2024-27944

Siemens RUGGEDCOM CROSSBOW is affected by CVE-2024-27944 (and related CVEs in the same advisory) for all versions prior to V5.5. The issue is external control of file name or path in the Firmware Upload Handler, enabling a privileged user to upload firmware to the root installation directory and ...

CVE-2024-27943

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow a privileged user to upload generic files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code...

CVE-2024-27943

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow a privileged user to upload generic files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code...

CVE-2024-27943

Siemens RUGGEDCOM CROSSBOW is affected by CVE-2024-27943 (all versions

CVE-2024-27942

Consolidated details for CVE-2024-27942: RUGGEDCOM CROSSBOW is affected in all versions prior to V5.5. The flaw allows any unauthenticated client to disconnect an active user from the server, enabling a denial-of-service condition. CVSS base score 7.5 ( HIGH ), network attack vector, low complexi...

CVE-2024-27942

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of...

CVE-2024-27942

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of...

CVE-2024-27941

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected client systems do not properly sanitize input data before sending it to the SQL server. An attacker could use this vulnerability to compromise the whole database...

CVE-2024-27941

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected client systems do not properly sanitize input data before sending it to the SQL server. An attacker could use this vulnerability to compromise the whole database...

CVE-2024-27940

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database...

CVE-2024-27940

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database...

CVE-2024-27940

CVE-2024-27940 affects Siemens/RUGGEDCOM CROSSBOW (versions prior to V5.5). Multiple sources confirm an SQL injection vulnerability that allows any authenticated user to send arbitrary SQL commands to the SQL server, potentially compromising the entire database. Publicly documented impact include...

CVE-2024-27939

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow the upload of arbitrary files of any unauthenticated user. An attacker could leverage this vulnerability and achieve arbitrary code execution with system privileges...

CVE-2024-27939

CVE-2024-27939 affects Siemens RUGGEDCOM CROSSBOW prior to version V5.5. The issue is missing authorization that allows an unauthenticated user to upload arbitrary files, enabling potential remote arbitrary code execution with system privileges. Public sources (Red Hat/Red Hat support and ICS adv...

CVE-2024-27939

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow the upload of arbitrary files of any unauthenticated user. An attacker could leverage this vulnerability and achieve arbitrary code execution with system privileges...

Siemens RUGGEDCOM CROSSBOW SQL注入漏洞

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. Siemens RUGGEDCOM CROSSBOW suffers from a SQL injection vulnerability due to a failure of an affected client system to properly filter input data before sending it to the SQL server. An attacker could...

Siemens RUGGEDCOM CROSSBOW 访问控制错误漏洞

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. A security vulnerability exists in Siemens RUGGEDCOM CROSSBOW due to an affected system allowing any unauthenticated client to disconnect any active user from the server. An attacker could exploit this...

PT-2024-3686 · Siemens · Ruggedcom Crossbow

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM CROSSBOW versions prior to V5.5 Description: A vulnerability has been identified that allows an attacker with the required privileges to overwrite arbitrary files in the system by downloading files with the same name as existing fil...