6.6
Medium
CVE-2023-27310 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2)
Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to otherwise non-privileged user accounts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM CROSSBOW | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of RUGGEDCOM CROSSBOW
The 29 CVEs of RUGGEDCOM CROSSBOW →
CVE-2026-89206
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
6.3
Medium
CVE-2026-89205
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
6.3
Medium
CVE-2026-89204
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
5.4
Medium
CVE-2026-89203
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
4.3
Medium