Arbitrary SQL Command Vulnerability Affects RUGGEDCOM CROSSBOW Systems

CVE-2024-27940

What is CVE-2024-27940?

A vulnerability exists in RUGGEDCOM CROSSBOW that allows any authenticated user to execute arbitrary SQL commands against the SQL server. This exploitation can lead to unauthorized access to the database, potentially compromising sensitive data and the integrity of the entire database system. All versions prior to 5.5 are affected, making it crucial for organizations utilizing this product to implement necessary security measures to mitigate potential threats.

References