ZeroHour

CVE-2023-27462

CVSS 3.1
4.3 medium
EPSS
<1%p43
Published
()
Modified
Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails to check for proper permissions for specific read queries. This could allow authenticated remote attackers to access data they are not authorized for.

Vendors
siemens
Products
ruggedcom crossbow
Weakness
CWE-862
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

In the news

No ingested article mentions this CVE yet.