CVE-2023-37372

published 2023-08-08

CVE-2023-37372: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	ruggedcom_crossbow	< 5.4	5.4
siemens	ruggedcom_crossbow	—	—

CWE-89