Exploit Report

Computer Security And Bug Information


CVE Title
Published Date2023-03-14T10:15Z
Modified Date2023-03-17T17:05Z
CWE TypeCWE-862
DescriptionA vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to otherwise non-privileged user accounts.
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites.
Reference URLhttps://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf
Reference DescriptionMISC https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf
Reference Description
TagsVendor Advisory

This site's data is aggregated programmatically and provided "as is" without any representations or warranties, express or implied. Exploit.report is not affiliated with the The MITRE Corporation, U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), or US government in any way. CVE and the CVE logo are registered trademarks of The MITRE Corporation

© 2022 Exploit.Report | Data | Contact | Privacy Policy | Articles