VULNERABILITY INTELLIGENCE

CVE-2023-27309

CVSS score5 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2023-03-14
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions for specific write queries. This could allow an authenticated remote attacker to perform unauthorized actions.

Weakness classification

  • CWE-862: Missing Authorization

Primary references