Privileged User Firmware Upload Vulnerability Affects RUGGEDCOM CROSSBOW Systems

CVE-2024-27944

What is CVE-2024-27944?

A vulnerable aspect of RUGGEDCOM CROSSBOW systems exists that permits a privileged user to upload firmware files directly to the root installation directory. This exposure could enable an attacker to manipulate critical system files, potentially leading to unauthorized access and remote code execution. Organizations using versions of RUGGEDCOM CROSSBOW earlier than V5.5 should prioritize remediating this vulnerability to safeguard their systems.

References