CVE-2023-27411

8.8 highEPSS 0.8%

High (8.8) in siemens ruggedcom crossbow. EPSS 0.8% chance of exploitation in the next 30 days.

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-08-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:ruggedcom_crossbow

References

https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf

Check your stack JSON