CVE-2024-27940

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database.

Score

CVSS 3.1 8.8 High

Status

Analyzed - productcert@siemens.com

Published

2024-05-14

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Ruggedcom Crossbow (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-916916.html