CVE-2023-37372

CriticalCVSS 9.8

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.71%

48th percentile - higher than 48% of all known CVEs

Summary

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4) that is vulnerable to SQL injection. This could allow unauthenticated remote attackers to execute arbitrary SQL queries on the server database.

Risk Assessment

This vulnerability could lead to unauthorized access to database information, posing a serious threat to the integrity and confidentiality of data within the organization.

Recommendation

It is recommended to update RUGGEDCOM CROSSBOW to version 5.4 or later to mitigate this vulnerability.

Original NVD description (English source)

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.