Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM CROSSBOW | All versions < V5.3 | — |
Advisories 2
- ICSA-23-075-02 Siemens RUGGEDCOM CROSSBOW V5.3 CISA ICS & IT advisories · Mar 14, 2023
- SSA-320629 SSA-320629: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3 Siemens ProductCERT · Mar 14, 2023