Skip to content
OpenAdvisories
High · 7.2 CVE-2024-27944 EUVD-2024-25118GHSA-6r9h-2p8r-jf6r

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload fir…

Published May 14, 2024 · Updated Aug 2, 2024 · Assigned by siemens

Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload firmware files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution.

Affected products

VendorProductAffectedFixed
Siemens RUGGEDCOM CROSSBOW < V5.5 V5.5

Advisories 2

References