Summary
The RUGGEDCOM CROSSBOW server application before V5.4 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, to create a denial of service condition, or to write arbitrary files to the application's file system.
Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
Vulnerabilities 5
-
Critical 9.8
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerabl…
-
High 8.8
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerabl…
-
High 7.5
An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.…
-
High 7.1
Microsoft Windows Defender Elevation of Privilege Vulnerability
Microsoft Windows Defender Elevation of Privilege Vulnerability
-
Medium 5.3
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unaut…
Revision history
-
#1
Publication date
References
-
SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-472630.html
-
SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf
-
SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-472630.txt