SSA-508506: Multiple Vulnerabilities in RUGGEDCOM CROSSBOW
RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-89206DE | medium6.3 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify th… | ||||
| CVE-2026-89205DE | medium6.3 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule… | ||||
| CVE-2026-89204DE | medium5.4 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. Th… | ||||
| CVE-2026-89203DE | medium4.3 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to ret… | ||||
| CVE-2026-89202DE | medium6.5 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. Th… | ||||
| CVE-2026-89201DE | high7.5 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names proce… | ||||
| CVE-2026-89200DE | medium6.7 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom… | ||||
| CVE-2026-89199DE | high8.8 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific data… | ||||
| CVE-2026-89198DE | high8.8 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to th… | ||||
| CVE-2026-89197DE | high8.8 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification cond… | ||||
| CVE-2026-89196DE | high8.8 | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the… | ||||
references
External citations — patches, advisories, analysis.
remediations (11)
- FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan