PT-2024-3688 · Siemens · Ruggedcom Crossbow

Published 2024-05-14 · Updated 2024-07-07 · CVE-2024-27944

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:N/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V5.5

Description The issue is related to incorrect external control of file names or paths in the Firmware Upload Handler component of the RUGGEDCOM CROSSBOW system. This could allow a remote attacker to upload arbitrary files and execute arbitrary code. A privileged user can upload firmware files to the system's root installation directory, potentially allowing an attacker to tamper with specific files or achieve remote code execution.

Recommendations For versions prior to V5.5, upgrade to version V5.5 or later to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to the Firmware Upload Handler component to minimize the risk of exploitation. Avoid using the Firmware Upload Handler until the issue is resolved.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-73

CWE-434

Related Identifiers

BDU:2024-04032

CVE-2024-27944

Affected Products

Ruggedcom Crossbow

References · 8

• https://cert-portal.siemens.com/productcert/html/ssa-916916.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27944 · Security Note
• https://bdu.fstec.ru/vul/2024-04032 · Security Note
• https://osv.dev/vulnerability/CVE-2024-27944 · Vendor Advisory
• https://github.com/advisories/GHSA-6r9h-2p8r-jf6r · Note
• https://vuldb.com/ru/?id.264140 · Note
• https://cybersecurity-help.cz/vdb/SB2024051720 · Note
• https://twitter.com/oktsec/status/1810179395660701788 · Twitter Post