A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails to check for proper permissions for specific read queries. This could allow authenticated remote attackers to access data they are not authorized for.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Siemens |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-31238 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails to check for proper permissions for specific read queries. This could allow authenticated remote attackers to access data they are not authorized for. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 04 Mar 2025 03:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: siemens
Published:
Updated: 2025-02-27T15:59:48.613Z
Reserved: 2023-03-01T17:29:28.823Z
Link: CVE-2023-27462
Vulnrichment
Updated: 2024-08-02T12:09:43.431Z
NVD
Status : Modified
Published: 2023-03-14T10:15:29.677
Modified: 2024-11-21T07:52:57.543
Link: CVE-2023-27462
Redhat
No data.
OpenCVE Enrichment
No data.