CVE-2024-27942CWE-306

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5)

High · published May 14, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of service situation.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00687 · 52.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-05-14T10:02Z
EPSS history
Timeline
  • 14 MAY 10:02Z
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5)
    cvelistv5