Ruggedcom Crossbow
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Ruggedcom Crossbow (a3470d47-be94-55e0-9650-6cd49ef3ba66) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-89199 |
vulnerable | 2026-11-03 10:17:50.526920 |
Details available
HIGH (8.8)
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.
Published: 2026-10-13T09:19:03.033Z
Updated: 2026-10-13T16:20:07.271Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-89204 |
vulnerable | 2026-11-03 10:17:50.521363 |
Details available
MEDIUM (5.4)
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation.
Published: 2026-10-13T09:19:08.604Z
Updated: 2026-10-13T16:20:07.151Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-89201 |
vulnerable | 2026-11-03 10:17:50.492324 |
Details available
HIGH (7.5)
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.
Published: 2026-10-13T09:19:05.287Z
Updated: 2026-10-14T19:28:00.768Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-89196 |
vulnerable | 2026-11-03 10:17:50.253912 |
Details available
HIGH (8.8)
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.
Published: 2026-10-13T09:18:59.688Z
Updated: 2026-10-14T19:26:44.566Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-89206 |
vulnerable | 2026-11-03 10:17:50.045909 |
Details available
MEDIUM (6.3)
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.
Published: 2026-10-13T09:19:10.792Z
Updated: 2026-10-13T16:20:07.016Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3596 |
vulnerable | 2026-06-08 06:43:50.438402 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27947 |
vulnerable | 2026-06-08 06:33:25.112508 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27946 |
vulnerable | 2026-06-08 06:33:25.111728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27945 |
vulnerable | 2026-06-08 06:33:25.111383 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27944 |
vulnerable | 2026-06-08 06:33:25.110844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27943 |
vulnerable | 2026-06-08 06:33:25.110506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27942 |
vulnerable | 2026-06-08 06:33:25.110010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27941 |
vulnerable | 2026-06-08 06:33:25.109443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27940 |
vulnerable | 2026-06-08 06:33:25.109082 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27939 |
vulnerable | 2026-06-08 06:33:25.108630 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37373 |
vulnerable | 2026-06-08 06:08:15.201657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37372 |
vulnerable | 2026-06-08 06:08:15.201100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27463 |
vulnerable | 2026-06-08 05:57:41.623460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27462 |
vulnerable | 2026-06-08 05:57:41.623015 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27411 |
vulnerable | 2026-06-08 05:57:41.519983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27310 |
vulnerable | 2026-06-08 05:57:40.837079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27309 |
vulnerable | 2026-06-08 05:57:40.836708 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.