VYPR
← All advisories
Medium severity5.0NVD Advisory· Published Mar 14, 2023· Updated Jun 17, 2026

CVE-2023-27309

CVE-2023-27309

Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions for specific write queries. This could allow an authenticated remote attacker to perform unauthorized actions.

Affected products

3
  • Siemens Foundation/CROSSBOWllm-create3 versions
    <V5.2+ 2 more
    • (no CPE)range: <V5.2
    • (no CPE)range: <V5.2
    • (no CPE)range: All versions < V5.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.