CVE-2023-37373

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages. An unauthenticated remote attacker could write arbitrary files to the affected application's file system.

Score

CVSS 3.1 7.5 High

Status

Modified - productcert@siemens.com

Published

2023-08-08

Last modified

2025-02-27

Weaknesses

CWE-306

Affected products

• Ruggedcom Crossbow (Siemens)

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf