Summary
RUGGEDCOM CROSSBOW before V5.3 contains two vulnerabilities that could allow authenticated remote attackers to access data they are not authorized for, or execute arbitrary database queries via an SQL injection attack.
Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
Vulnerabilities 2
-
High 8.8
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applica…
-
Low 3.1
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affect…
Revision history
-
#1
Publication Date
References
-
SSA-320629: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf
-
SSA-320629: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-320629.txt