VULNERABILITY INTELLIGENCE
CVE-2024-27942
CVSS score7.5 HIGH
EPSS probability0.69%
CISA KEVNot currently listed
Published2024-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of service situation.
Weakness classification
- productcert@siemens.com: CWE-306
Primary references
- productcert@siemens.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory