8.8
High
CVE-2024-27940 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5)
Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM CROSSBOW 5.5 | earliest → < 5.5 | 5.5 |
| ruggedcom_crossbow 5.5 | earliest → < 5.5 | 5.5 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of RUGGEDCOM CROSSBOW
The 29 CVEs of RUGGEDCOM CROSSBOW →
CVE-2026-89206
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
6.3
Medium
CVE-2026-89205
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
6.3
Medium
CVE-2026-89204
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
5.4
Medium
CVE-2026-89203
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
4.3
Medium