CVE-2024-27945

CWE-73CWE-434 — Unrestricted File Upload3 documents3 sources
Severity
7.2HIGH
EPSS
2.4%
top 14.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Siemens Ruggedcom Crossbow
Timeline
PublishedMay 14

Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a privileged user to upload files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5siemens/ruggedcom_crossbow< V5.5

🔴Vulnerability Details

2
CVEList
CVE-2024-27945: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5↗2024-05-14
▶
GHSA
GHSA-928h-v43x-jjq6: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5↗2024-05-14
▶