Siemens RUGGEDCOM CROSSBOW
27 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-89206 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side author | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-89205 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side author | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-89204 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to databas | MEDIUM 5.3 | 0.1 % | ||
| CVE-2026-89203 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-89202 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization chec | HIGH 7.1 | 0.2 % | ||
| CVE-2026-89201 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input | HIGH 7.7 | 0.2 % | ||
| CVE-2026-89200 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input | HIGH 8.4 | 0.1 % | ||
| CVE-2026-89199 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensiti | HIGH 8.7 | 0.2 % | ||
| CVE-2026-89198 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the f | HIGH 8.7 | 0.3 % | ||
| CVE-2026-89197 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input | HIGH 8.7 | 0.3 % | ||
| CVE-2026-89196 | < V6.0 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input | HIGH 8.7 | 0.3 % | ||
| CVE-2024-27947 | < V5.5 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems could allow log messages to be forward | MEDIUM 5.3 | 0.6 % | ||
| CVE-2024-27946 | < V5.5 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). Downloading files overwrites files with the same name in th | MEDIUM 6.5 | 0.9 % | ||
| CVE-2024-27945 | < V5.5 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a pri | HIGH 7.2 | 1.4 % | ||
| CVE-2024-27944 | < V5.5 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload firm | HIGH 7.2 | 1.4 % | ||
| CVE-2024-27943 | < V5.5 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload gene | HIGH 7.2 | 1.3 % | ||
| CVE-2024-27942 | < V5.5 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthenticated client to di | HIGH 7.5 | 0.7 % | ||
| CVE-2024-27941 | < V5.5 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected client systems do not properly sanitize input | HIGH 8.8 | 0.8 % | ||
| CVE-2024-27940 | < V5.5 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any authenticated user to send a | HIGH 8.8 | 0.8 % | ||
| CVE-2024-27939 | < V5.5 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow the upload of arbitrary files of | CRITICAL 9.8 | 0.8 % | ||
| CVE-2023-37373 | All versions < V5.4 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write | HIGH 7.5 | 0.5 % | ||
| CVE-2023-37372 | All versions < V5.4 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. T | CRITICAL 9.8 | 0.9 % | ||
| CVE-2023-27411 | All versions < V5.4 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. T | HIGH 8.8 | 0.8 % | ||
| CVE-2023-27463 | All versions < V5.3 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable t | HIGH 8.8 | 0.8 % | ||
| CVE-2023-27462 | All versions < V5.3 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails | MEDIUM 4.3 | 0.5 % | ||
| CVE-2023-27310 | All versions < V5.2 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails | HIGH 8.8 | 0.6 % | ||
| CVE-2023-27309 | All versions < V5.2 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails | HIGH 8.8 | 0.5 % |