{"id":"CVE-2023-27463","aliases":["EUVD-2023-31239","GHSA-85mh-hwv3-rxw3"],"status":"published","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.3). The audit log...","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00805,"percentile":0.57033,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-03-14T09:32:09Z","modified":"2026-10-23T23:10:00Z","products":[{"vendor":"siemens","product":"ruggedcom crossbow"},{"vendor":"siemens","product":"ruggedcom_crossbow"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27463"},{"url":"https://github.com/advisories/GHSA-85mh-hwv3-rxw3"}],"sources":{"cve":[{"id":"CVE-2023-27463","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.","status":"published","published":"2023-03-14T09:32:09.667Z","modified":"2025-02-27T18:59:38.671Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:35:26.63732Z"}],"euvd":[{"id":"EUVD-2023-31239","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.","status":"published","published":"2023-03-14T09:32:09Z","modified":"2025-02-27T18:59:38Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T20:53:21.911964Z"}],"ghsa":[{"id":"GHSA-85mh-hwv3-rxw3","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.3). The audit log...","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.","status":"published","published":"2023-03-14T12:30:45Z","modified":"2023-03-14T12:30:55Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:54:20.362756Z"}],"nvd":[{"id":"CVE-2023-27463","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.","status":"published","published":"2023-03-14T10:15:29.757Z","modified":"2026-10-23T23:10:00.157Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:07:49.031498Z"}]}}