CVE-2023-37372 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execu...
CriticalCVSS 9.8
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens RUGGEDCOM CROSSBOW | = All versions < V5.4 | No fix listed |
| Siemens RUGGEDCOM CROSSBOW | < 5.4 | 5.4 |
References
- cert-portal.siemens.com vendor-advisory