SQL Injection Vulnerability in RUGGEDCOM CROSSBOW (All versions < V5.4)

CVE-2023-27411 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.