SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-11824US | — | — | ||
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by… | ||||
| CVE-2026-11822US | — | — | ||
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrar… | ||||
| CVE-2025-71316US | — | — | ||
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load… | ||||
| CVE-2025-70873US | — | — | ||
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted… | ||||
| CVE-2025-6965US | high7.7 | Exploit | ||
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corrupti… | ||||
references
External citations — patches, advisories, analysis.
remediations (5)
- FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan