CVE-2023-27463: SQL Injection
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
RUGGEDCOM CROSSBOWto a version that resolves this vulnerability.Fixed in V5.3
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-27463.
What is the title of the vulnerability?
The title of the vulnerability is "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form …"
What is the affected software?
The affected software is Siemens Ruggedcom Crossbow (All versions < V5.3).
What is the severity of CVE-2023-27463?
The severity of CVE-2023-27463 is high with a severity value of 8.8.
What is the Common Weakness Enumeration (CWE) ID?
The Common Weakness Enumeration (CWE) ID for CVE-2023-27463 is CWE-89.