A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a privileged user to upload files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution.

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-27945
• https://cert-portal.siemens.com/productcert/html/ssa-916916.html