CVE-2023-27310: High severity Siemens Ruggedcom Crossbow vulnerability
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to otherwise non-privileged user accounts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
RUGGEDCOM CROSSBOWto a version that resolves this vulnerability.Fixed in V5.2
Event History
Frequently Asked Questions
What is CVE-2023-27310?
CVE-2023-27310 is a vulnerability identified in RUGGEDCOM CROSSBOW (All versions < V5.2).
How severe is CVE-2023-27310?
CVE-2023-27310 has a severity rating of 8.8 (high).
What is the affected software of CVE-2023-27310?
The affected software of CVE-2023-27310 is Siemens Ruggedcom Crossbow (All versions < V5.2).
What is the CWE of CVE-2023-27310?
The CWE of CVE-2023-27310 is 862.
How can I fix CVE-2023-27310?
To fix CVE-2023-27310, update your RUGGEDCOM CROSSBOW software to version 5.2 or higher.