What is CVE-2024-27946?

CVE-2024-27946 is a medium-severity vulnerability in Siemens Ruggedcom Crossbow, classified under Path Traversal. CVSS score: 6.5/10. Published 2024-05-14.

How severe is CVE-2024-27946?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Path Traversal in Siemens Ruggedcom Crossbow

CVE-2024-27946

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). Downloading files overwrites files with the same name in the installation directory of the affected systems. The filename for the target file can be specified, thus arbitrary files can be overwritten by an attacker with the required privileges.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.009 (56.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H.

Affected products

Siemens Ruggedcom Crossbow — versions 0
Siemens Ruggedcom_crossbow

Weakness classification (CWE)

CWE-22 — Path Traversal

References

productcert@siemens.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-27946?: CVE-2024-27946 is a medium-severity vulnerability in Siemens Ruggedcom Crossbow, classified under Path Traversal. CVSS score: 6.5/10. Published 2024-05-14.
How severe is CVE-2024-27946?: Medium severity. CVSS v3 base score is 6.5 out of 10.