CVE-2023-27310

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to otherwise non-privileged user accounts.

CVSS 3.1

8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-25)

CWE

CWE-862

Published

2023-03-14

Modified

2026-10-23

Record from

the NVD, synced 2026-10-24

Affected

• siemens:ruggedcom_crossbow

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf

Check your stackJSON