← CVE Intelligence

CVE-2023-27310

Siemens / RUGGEDCOM CROSSBOW PUBLISHED

Description (CNA)

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to otherwise non-privileged user accounts.

Affected (CNA)

Vendor / productVersions
Siemens / RUGGEDCOM CROSSBOWaffected All versions < V5.2

CWE

CWE-862

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.