Siemens RUGGEDCOM CROSSBOW Privilege Escalation Vulnerability in Secure Access Manager Primary Prior to V5.8

A privilege escalation vulnerability exists in Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) versions prior to V5.8. The vulnerability allows User Administrators to manage groups they are part of, potentially enabling them to escalate privileges and gain access to any device group at any access level.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a User Administrator to access and manage device groups with elevated rights.

Remediation

Users are advised to update RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) to version V5.8 or later. Additional guidance can be found on the Siemens support portal.