The flaw stems from insufficient restriction of certain database queries that expose sensitive configuration items in RUGGEDCOM CROSSBOW devices. An attacker who can obtain authenticated access to the device can query these endpoints to retrieve administrative credentials for internal systems, enabling unauthorized disclosure of confidential data and subsequent escalation of privilege within the network.

Siemens RUGGEDCOM CROSSBOW devices of any version earlier than 6.0 are affected. The vulnerability applies to all installations that have not been updated beyond V6.0, regardless of hardware model or deployment scenario.

The CVSS score of 8.7 indicates a high severity impact, with a significant likelihood that an attacker could exploit the weakness once authenticated. The EPSS score is unavailable but the vulnerability is not included in the CISA KEV catalog, suggesting no confirmed widespread exploitation at this time. Because the flaw requires legitimate credentials to perform the vulnerable queries, the most probable attack vector is an insider or a remote attacker who has compromised device credentials through phishing, weak passwords, or other means, followed by a targeted credential dump.