VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 8, 2023· Updated Jun 17, 2026

CVE-2023-37372

CVE-2023-37372

Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.

Affected products

4
  • Siemens Foundation/CROSSBOW4 versions
    cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*range: <5.4
    • (no CPE)range: <V5.4
    • (no CPE)range: <V5.4
    • (no CPE)range: All versions < V5.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.