Medium severity6.6NVD Advisory· Published Mar 14, 2023· Updated Jun 17, 2026
CVE-2023-27310
CVE-2023-27310
Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to otherwise non-privileged user accounts.
Affected products
3<V5.2+ 2 more
- (no CPE)range: <V5.2
- (no CPE)range: <V5.2
- (no CPE)range: All versions < V5.2
Patches
Vulnerability mechanics
References
1- cert-portal.siemens.com/productcert/pdf/ssa-260625.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.