What is CVE-2024-27942?

CVE-2024-27942 is a high-severity vulnerability in Siemens Ruggedcom Crossbow, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2024-05-14.

How severe is CVE-2024-27942?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Siemens Ruggedcom Crossbow

CVE-2024-27942

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of service situation.

Vulnerability class: Broken Authentication

EPSS: 0.007 (49.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Siemens Ruggedcom Crossbow — versions 0
Siemens Ruggedcom_crossbow

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

productcert@siemens.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-27942?: CVE-2024-27942 is a high-severity vulnerability in Siemens Ruggedcom Crossbow, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2024-05-14.
How severe is CVE-2024-27942?: High severity. CVSS v3 base score is 7.5 out of 10.