{"id":"CVE-2023-37372","aliases":["EUVD-2023-41274","GHSA-vwvp-23vx-932h"],"status":"published","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.4). The affected...","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00936,"percentile":0.61077,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-08-08T09:20:27Z","modified":"2026-06-17T06:08:06Z","products":[{"vendor":"siemens","product":"ruggedcom crossbow"},{"vendor":"siemens","product":"ruggedcom_crossbow"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37372"},{"url":"https://github.com/advisories/GHSA-vwvp-23vx-932h"}],"sources":{"cve":[{"id":"CVE-2023-37372","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.","status":"published","published":"2023-08-08T09:20:27.473Z","modified":"2025-02-27T21:10:21.124Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"critical","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:35:16.454633Z"}],"euvd":[{"id":"EUVD-2023-41274","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.","status":"published","published":"2023-08-08T09:20:27Z","modified":"2025-02-27T21:10:21Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"critical"}],"updated_at":"2026-11-02T20:53:20.548403Z"}],"ghsa":[{"id":"GHSA-vwvp-23vx-932h","title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.4). The affected...","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.","status":"published","published":"2023-08-08T12:30:20Z","modified":"2024-04-04T06:38:45Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:56:44.329928Z"}],"nvd":[{"id":"CVE-2023-37372","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database.","status":"published","published":"2023-08-08T10:15:15.44Z","modified":"2026-06-17T06:08:06.343Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:08:20.798312Z"}]}}