CVE-2024-27939

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow the upload of arbitrary files of any unauthenticated user. An attacker could leverage this vulnerability and achieve arbitrary code execution with system privileges.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - productcert@siemens.com

Published

2024-05-14

Last modified

2024-08-02

Weaknesses

CWE-862

Affected products

• Ruggedcom Crossbow (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-916916.html