CVE-2024-27946: Path Traversal
Published May 14, 2024
·Updated
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). Downloading files overwrites files with the same name in the installation directory of the affected systems. The filename for the target file can be specified, thus arbitrary files can be overwritten by an attacker with the required privileges.
Affected Software
2 affected components
RUGGEDCOM CROSSBOW<5.5
Siemens Ruggedcom Crossbow<5.5
Event History
May 14, 2024
CVE Published
via MITRE·10:02 AM
Data Sourced
via MITRE·10:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-27946?
CVE-2024-27946 has been rated as a high-severity vulnerability.
2
How do I fix CVE-2024-27946?
To fix CVE-2024-27946, upgrade RUGGEDCOM CROSSBOW to version 5.5 or later.
3
What impact does CVE-2024-27946 have on RUGGEDCOM CROSSBOW?
CVE-2024-27946 allows attackers to overwrite arbitrary files within the installation directory.
4
Which versions of RUGGEDCOM CROSSBOW are affected by CVE-2024-27946?
All versions of RUGGEDCOM CROSSBOW prior to version 5.5 are affected by CVE-2024-27946.
5
Is there any workaround for CVE-2024-27946?
There are no documented workarounds for CVE-2024-27946; upgrading is the recommended solution.