A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a privileged user to upload files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code execution.
https://www.cisa.gov/news-events/ics-advisories/icsa-24-137-10
https://cert-portal.siemens.com/productcert/html/ssa-916916.html