Summary
The RUGGEDCOM CROSSBOW server application before V5.5 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, or upload of arbitrary files to the application's file system. The majority of the reported vulnerabilities might have a high impact in the availability of the affected systems.
Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
Vulnerabilities 9
-
Critical 9.8
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow the upload …
-
High 8.8
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authent…
-
High 8.8
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected client systems do not pro…
-
High 7.5
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthe…
-
High 7.2
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privilege…
-
High 7.2
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privilege…
-
High 7.2
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affecte…
-
Medium 6.5
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). Downloading files overwrites files wit…
-
Medium 5.3
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems could allow log m…
Revision history
-
#1
Publication Date
References
-
SSA-916916: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.5 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-916916.html
-
SSA-916916: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.5 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-916916.pdf
-
SSA-916916: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.5 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-916916.txt