CVE-2023-27309

CVE-2023-27309 is a high-severity vulnerability affecting all versions of Siemens RUGGEDCOM CROSSBOW prior to V5.2. An authenticated remote attacker can exploit a flaw in the client query handler, which lacks proper permission checks for specific write queries, to perform unauthorized actions. This vulnerability carries a CVSS score of 8.8, indicating a high impact on confidentiality, integrity, and availability with low attack complexity. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion and media coverage.