Siemens RUGGEDCOM CROSSBOW V5.3
Advisory ansehen veröffentlicht 2023-03-14
RUGGEDCOM CROSSBOW before V5.3 contains two vulnerabilities that could allow authenticated remote attackers to access data they are not authorized for, or execute arbitrary database queries via an SQL injection attack. Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-27463US | high8.8 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authen… | ||||
| CVE-2023-27462US | medium4.3OT erhöht | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails to check for proper permissions for spec… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-320629: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3 - CSAF Versionself
- SSA-320629: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3 - PDF Versionself
- SSA-320629: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3 - TXT Versionself
- ICS Advisory ICSA-23-075-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-075-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenRUGGEDCOM CROSSBOW
Update to V5.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813558/ - BehobenRUGGEDCOM CROSSBOW
Update to V5.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813558/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan