Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow the upload of arbitrary files of any unauthenticated user. An attacker could leverage this vulnerability and achieve arbitrary code execution with system privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM CROSSBOW | < V5.5 | V5.5 |
Advisories 2
- ICSA-24-137-10 Siemens RUGGEDCOM CROSSBOW CISA ICS & IT advisories · May 14, 2024
- SSA-916916 SSA-916916: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.5 Siemens ProductCERT · May 14, 2024