CVE-2024-27942
HIGHRUGGEDCOM CROSSBOW < 5.5 - Unauthenticated Denial of Service via User Disconnection
Title source: llmDescription
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of service situation.
References (1)
Core 1
Core References
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-916916.html
Scores
CVSS v3
7.5
EPSS
0.0043
EPSS Percentile
62.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-306
Status
published
Products (1)
siemens/ruggedcom_crossbow
< 5.5
Published
May 14, 2024
Tracked Since
Feb 18, 2026