Bulk Import Vulnerability Affects RUGGEDCOM CROSSBOW Systems

CVE-2024-27945

Summary

A significant vulnerability exists in all versions of RUGGEDCOM CROSSBOW prior to v5.5, which affects its bulk import feature. This vulnerability allows a privileged user to upload files directly to the root installation directory of the system. By exploiting this flaw, an attacker has the potential to replace critical system files, leading to unauthorized modification, data corruption, or even enabling remote code execution. Organizations using the affected versions are advised to review their permissions and upgrade to the latest version to mitigate these security risks.

References