CVE-2023-27309

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions for specific write queries. This could allow an authenticated remote attacker to perform unauthorized actions.

• CWE-862

• https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdfVendor Advisory

Published

Mar 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-27303Improper access control in some Intel(R) Thunderbolt(TM) DCH…3.8
• CVE-2023-27304Operation restriction bypass vulnerability in Message and Bu…4.3
• CVE-2023-27305Incorrect default permissions in some Intel(R) Arc(TM) Contr…7.8
• CVE-2023-27306Improper Initialization in firmware for some Intel(R) Optane…5.5
• CVE-2023-27307Improper buffer restrictions in some Intel(R) Thunderbolt(TM…3.8
• CVE-2023-27308Improper buffer restrictions in some Intel(R) Thunderbolt(TM…4.6
• CVE-2023-2731A NULL pointer dereference flaw was found in Libtiff's LZWDe…5.5
• CVE-2023-27310A vulnerability has been identified in RUGGEDCOM CROSSBOW (A…8.8
• CVE-2023-27311NetApp Blue XP Connector versions prior to 3.9.25 expose inf…5.3
• CVE-2023-27312SnapCenter Plugin for VMware vSphere versions 4.6 prior to 4…4.3
• CVE-2023-27313SnapCenter versions 3.x and 4.x prior to 4.9 are susceptible…8.8
• CVE-2023-27314ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.…7.5