CVE-2024-27946

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. Downloading files overwrites files with the same name in the installation directory of the affected systems. The filename for the target file can be specified, thus arbitrary files can be overwritten by an attacker with...

CVE-2024-27946

CVE-2024-27946 affects Siemens RUGGEDCOM CROSSBOW (all versions before V5.5). The issue is a path traversal/file download weakness that lets an attacker overwrite arbitrary files in the installation directory by supplying a target filename, given the attacker has the required privileges. Affected...