CVE Catalog

CVE-2023-37373

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.43%

34th percentile - higher than 34% of all known CVEs

Summary

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages.

Risk Assessment

An unauthenticated remote attacker could write arbitrary files to the affected application's file system, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to version V5.4 or later to mitigate this vulnerability.

Original NVD description (English source)

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages. An unauthenticated remote attacker could write arbitrary files to the affected application's file system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS