SB2023081011 - Multiple vulnerabilities in Siemens RUGGEDCOM CROSSBOW
Published: August 10, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 5 secuirty vulnerabilities.
1) Out-of-bounds read (CVE-ID: CVE-2021-31239)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in ext/misc/appendvfs.c. A local user can trigger an out-of-bounds read error and crash the database.
2) Absolute Path Traversal (CVE-ID: CVE-2022-37971)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insufficient path processing in the Microsoft Windows Defender. A local user can delete arbitrary files and folders on the system and escalate privileges.
3) SQL injection (CVE-ID: CVE-2023-27411)
The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.
The vulnerability exists due to insufficient sanitization of user-supplied data. A remote user can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.
Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.
4) SQL injection (CVE-ID: CVE-2023-37372)
The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.
The vulnerability exists due to insufficient sanitization of user-supplied data. A remote attacker can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.
Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.
5) Missing Authentication for Critical Function (CVE-ID: CVE-2023-37373)
The vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to the affected applications accept unauthenticated file write messages. A remote attacker can write arbitrary files to the affected application's file system.
Remediation
Install update from vendor's website.