siemens ruggedcom-crossbow CVE-2023-27411 is a vulnerability in Siemens Ruggedcom Crossbow
Published on August 8, 2023

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2023-27411 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

What is a SQL Injection Vulnerability?

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

CVE-2023-27411 has been classified to as a SQL Injection vulnerability or weakness.


Products Associated with CVE-2023-27411

You can be notified by stack.watch whenever vulnerabilities like CVE-2023-27411 are published in these products:

Siemens Ruggedcom Crossbow
 

What versions of Ruggedcom Crossbow are vulnerable to CVE-2023-27411?