CVE-2024-27944

HIGH

RUGGEDCOM CROSSBOW < 5.5 - Authenticated Unrestricted Firmware Upload

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload firmware files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution.

References (1)

Core 1

Scores

CVSS v3 7.2
EPSS 0.0141
EPSS Percentile 69.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-434 CWE-73
Status published
Products (1)
siemens/ruggedcom_crossbow < 5.5
Published May 14, 2024
Tracked Since Feb 18, 2026