Siemens RUGGEDCOM CROSSBOW
The RUGGEDCOM CROSSBOW server application before V5.4 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, to create a denial of service condition, or to write arbitrary files to the application's file system. Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-37373US | high7.5OT elevated | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages. An unauthenticated remote att… | ||||
| CVE-2023-37372US | critical9.8 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remot… | ||||
| CVE-2023-27411US | high8.8 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an authenticated remote… | ||||
| CVE-2021-31239US | high7.5 | — | ||
An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function. | ||||
| CVE-2022-37971US | — | — | ||
Microsoft Windows Defender Elevation of Privilege Vulnerability | ||||
references
External citations — patches, advisories, analysis.
- SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - CSAF Versionself
- SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - HTML Versionself
- SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - PDF Versionself
- SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - TXT Versionself
- ICS Advisory ICSA-23-222-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-222-05 - Web Versionself
- Recommended Practicesexternal
remediations (5)
- FixedRUGGEDCOM CROSSBOW
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/ - FixedRUGGEDCOM CROSSBOW
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/ - FixedRUGGEDCOM CROSSBOW
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/ - FixedRUGGEDCOM CROSSBOW
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/ - FixedRUGGEDCOM CROSSBOW
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan