CVE-2023-37372

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.

Score

CVSS 3.1 9.8 Critical

Status

Modified - productcert@siemens.com

Published

2023-08-08

Last modified

2025-02-27

Weaknesses

CWE-89

Affected products

• Ruggedcom Crossbow (Siemens)

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf