SSA-260625 — SSA-260625: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2

Summary

RUGGEDCOM CROSSBOW V5.2 fixes two vulnerabilities that
could allow authenticated remote attackers to perform unauthorized actions
(CVE-2023-27309) or escalate privileges (CVE-2023-27310).

Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.

Vulnerabilities 2

Medium 6.6

CVE-2023-27310

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affect…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Mar 14, 2023
Medium 5.0

CVE-2023-27309

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affect…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Mar 14, 2023

Revision history

2023-03-14 #1
Publication Date

References

SSA-260625: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf
SSA-260625: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-260625.txt