SSA-472630 V1.0: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4

The RUGGEDCOM CROSSBOW server application before V5.4 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, to create a denial of service condition, or to write arbitrary files to the application’s file system.

Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.

application attacks database denial of service file files file system injection injection attacks ruggedcom security server service siemens sql sql injection ssa system update vulnerabilities