CVE-2024-27940: SQL Injection
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send arbitrary SQL commands to the SQL server. An attacker could use this vulnerability to compromise the whole database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27940?
CVE-2024-27940 is considered a critical vulnerability due to its potential to compromise the entire database.
How do I fix CVE-2024-27940?
To fix CVE-2024-27940, update RUGGEDCOM CROSSBOW to version 5.5 or later.
Who is affected by CVE-2024-27940?
All users of RUGGEDCOM CROSSBOW versions prior to 5.5 are affected by CVE-2024-27940.
What is the impact of CVE-2024-27940?
The impact of CVE-2024-27940 allows authenticated users to execute arbitrary SQL commands, potentially leading to data compromise.
Is there any workaround for CVE-2024-27940?
Currently, there are no known workarounds for CVE-2024-27940; upgrading to a fixed version is recommended.