CVE-2024-27945: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a privileged user to…

high7.2CVSS 3.1

AVNACLPRHUINSUCHIHAH

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a privileged user to upload files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	ruggedcom_crossbow	< V5.5	V5.5
siemens	ruggedcom_crossbow	< 5.5	5.5