CVE-2024-27942 — Missing Authentication for Critical Function in Siemens Ruggedcom Crossbow

CWE-306 — Missing Authentication for Critical Function3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.4%
top 37.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Siemens Ruggedcom Crossbow
Timeline
PublishedMay 14

Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of service situation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5siemens/ruggedcom_crossbow< V5.5

🔴Vulnerability Details

2
GHSA
GHSA-r67f-7g4f-5cfq: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5↗2024-05-14
▶
CVEList
CVE-2024-27942: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5↗2024-05-14
▶
CVE-2024-27942 — Siemens vulnerability | cvebase