CVE-2023-27463

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.

Score

CVSS 3.1 8.8 High

Status

Modified - productcert@siemens.com

Published

2023-03-14

Last modified

2026-10-23

Weaknesses

CWE-89

Affected products

• Ruggedcom Crossbow (Siemens)

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf