CVE-2024-27940

8.8HIGH

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could u

Published: 5/14/2024Updated: 2/6/2025
View on NVDView on MITRE

Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database.

AI AnalysisPowered by AI

Affected Products

siemensruggedcom_crossbow

References