SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4
The RUGGEDCOM CROSSBOW server application before V5.4 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, to create a denial of service condition, or to write arbitrary files to the application's file system. Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-37373US | high7.5OT erhöht | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages. An unauthenticated remote att… | ||||
| CVE-2023-37372US | critical9.8 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remot… | ||||
| CVE-2023-27411US | high8.8 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an authenticated remote… | ||||
| CVE-2021-31239US | high7.5 | — | ||
An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function. | ||||
| CVE-2022-37971US | — | — | ||
Microsoft Windows Defender Elevation of Privilege Vulnerability | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - CSAF Versionself
- SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - HTML Versionself
- SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - PDF Versionself
- SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 - TXT Versionself
Behebungen (5)
- BehobenRUGGEDCOM CROSSBOW
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/ - BehobenRUGGEDCOM CROSSBOW
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/ - BehobenRUGGEDCOM CROSSBOW
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/ - BehobenRUGGEDCOM CROSSBOW
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/ - BehobenRUGGEDCOM CROSSBOW
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan