CVE-2023-27310

CVE-2023-27310 affects all versions of Siemens RUGGEDCOM CROSSBOW prior to V5.2, stemming from a permission bypass in the client query handler that allows authenticated attackers to assign administrative groups to non-privileged user accounts. This vulnerability carries a CVSS score of 8.8 (HIGH), indicating a critical risk due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has garnered minimal community discussion and media coverage.