Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM CROSSBOW | < V5.5 | V5.5 |
Advisories 2
- ICSA-24-137-10 Siemens RUGGEDCOM CROSSBOW CISA ICS & IT advisories · May 14, 2024
- SSA-916916 SSA-916916: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.5 Siemens ProductCERT · May 14, 2024