Ruggedcom Crossbow (Siemens) - vulnerabilities (CVEs)

29 CVEs, 11 in the last 30 days, 7 known versions, newest CVE from 2026-10-13. Vendor: Siemens.

CVEs of Ruggedcom Crossbow

CVE-2026-89206 - CVSS 6.3 (medium), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for…
CVE-2026-89205 - CVSS 6.3 (medium), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for…
CVE-2026-89204 - CVSS 5.4 (medium), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for…
CVE-2026-89203 - CVSS 5.3 (medium), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries,…
CVE-2026-89202 - CVSS 7.1 (high), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device…
CVE-2026-89201 - CVSS 7.7 (high), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group…
CVE-2026-89200 - CVSS 8.4 (high), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and…
CVE-2026-89199 - CVSS 8.8 (high), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration…
CVE-2026-89198 - CVSS 8.8 (high), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of…
CVE-2026-89197 - CVSS 8.8 (high), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value…
CVE-2026-89196 - CVSS 8.8 (high), 2026-10-13: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names…
CVE-2025-6965 - CVSS 7.7 (high), 2025-07-15: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could…
CVE-2024-3596 - CVSS 9 (critical), 2024-07-09: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or…
CVE-2024-27947 - CVSS 5.3 (medium), 2024-05-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems could allow log messages to be forwarded to a specific…
CVE-2024-27946 - CVSS 6.5 (medium), 2024-05-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). Downloading files overwrites files with the same name in the installation…
CVE-2024-27945 - CVSS 7.2 (high), 2024-05-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a privileged user to…
CVE-2024-27944 - CVSS 7.2 (high), 2024-05-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload firmware files to the…
CVE-2024-27943 - CVSS 7.2 (high), 2024-05-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload generic files to the…
CVE-2024-27942 - CVSS 7.5 (high), 2024-05-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthenticated client to disconnect any…
CVE-2024-27941 - CVSS 8.8 (high), 2024-05-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected client systems do not properly sanitize input data before…
CVE-2024-27940 - CVSS 8.8 (high), 2024-05-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send arbitrary SQL…
CVE-2024-27939 - CVSS 9.8 (critical), 2024-05-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow the upload of arbitrary files of any…
CVE-2023-37373 - CVSS 7.5 (high), 2023-08-08: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages. An…
CVE-2023-37372 - CVSS 9.8 (critical), 2023-08-08: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an…
CVE-2023-27411 - CVSS 8.8 (high), 2023-08-08: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an…
CVE-2021-31239 - CVSS 7.5 (high), 2023-05-09: An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.
CVE-2023-27463 - CVSS 8.8 (high), 2023-03-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection.…
CVE-2023-27462 - CVSS 4.3 (medium), 2023-03-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails to check for…
CVE-2023-27310 - CVSS 8.8 (high), 2023-03-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for…
CVE-2023-27309 - CVSS 8.8 (high), 2023-03-14: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for…