CVE-2024-27946CWE-22

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5)

Medium · published May 14, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). Downloading files overwrites files with the same name in the

installation directory of the affected systems. The filename for

the target file can be specified, thus arbitrary files can be

overwritten by an attacker with the required privileges.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00908 · 59.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-05-14T10:02Z
EPSS history
Timeline
  • 14 MAY 10:02Z
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5)
    cvelistv5