Siemens RUGGEDCOM CROSSBOW Station Access Controller
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-11824US | — | — | ||
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by… | ||||
| CVE-2026-11822US | — | — | ||
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrar… | ||||
| CVE-2025-71316US | — | — | ||
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load… | ||||
| CVE-2025-70873US | — | — | ||
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted… | ||||
| CVE-2025-6965US | high7.7 | Exploit | ||
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corrupti… | ||||
references
External citations — patches, advisories, analysis.
- SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller - CSAF Versionself
- SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller - HTML Versionself
- ICS Advisory icsa-26-295-15 JSONself
- ICS Advisory icsa-26-295-15 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/ - FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan