attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Siemens RUGGEDCOM CROSSBOW
Classified as
CWE-639 (Authorization Bypass Through User-Controlled Key)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
Siemens
RUGGEDCOM CROSSBOW
Subsystems
General OT
Sectors
Multiple
What to Know
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation. (NVD)
What to Do
Monitor Siemens's web page for any future patch releases.