Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM CROSSBOW | All versions < V5.4 | — |
Advisories 2
- ICSA-23-222-05 Siemens RUGGEDCOM CROSSBOW CISA ICS & IT advisories · May 6, 2025
- SSA-472630 SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 Siemens ProductCERT · Aug 8, 2023