CVE-2025-6965

highpriority · attend · 67EPSS 0.733 · 99 %ileexploit · PoCCHDEEUNLRUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
1 exploit · PoC
Likely / severe?
73.3% (99th) EPSS
CVSS 7.7 · high
Is it mine?
438 products
Check your exposure
Who says so?
9 sources
cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-22

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedAbility Camera Connectabb_psirt

    The problem is corrected in the following product versions: - ABB Ability Camera Connect 2.0.0.49. The easiest path to mitigate the problem is an update of ABB Ability Camera Connect system by the customer. ABB recommends that customers apply the update at earliest convenience.

  • FixedAutomation Studioabb_psirt

    The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)siemens_psirt

    Update to V5.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/110000841/
  • FixedSIDIS Primesiemens_psirt

    Update to V4.0.800 or later version

  • FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)siemens_psirt

    Update to V6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/110006651/
  • FixedSIDIS Primecisa_csaf_ot

    Update to V4.0.800 or later version

  • FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)cisa_csaf_ot

    Update to V5.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/110000841/
  • FixedB&R Automation Studiocisa_csaf_ot

    The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)cisa_csaf_ot

    Update to V6.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/110006651/
  • MitigationAbility Camera Connectabb_psirt

    Camera Connect is deployed as an OT solution typically operating in ISA-95 Level 2 (control/supervisory level) environments. This deployment architecture provides inherent risk mitigation: - Network Segmentation: The solution operates within isolated industrial control networks, separated from IT networks and the internet by firewalls and demilitarized zones (DMZs). - Access Control: Access to the Camera Connect system is restricted to authorized plant operators and maintenance personnel through role-based access controls and authentication mechanisms. - Limited Attack Surface: The CVSS v4.0 vector indicates Network attack vector (AV:N), High attack complexity (AC:H), and requires Low privileges (PR:L), significantly reducing the likelihood of exploitation in a controlled OT environment. - Physical Security: Level 2 systems are typically located in secure facilities with physical access controls. - Operational Monitoring: Industrial environments maintain operational monitoring that can detect anomalous behavior. Given these factors, successful exploitation would require an authenticated attacker with specific knowledge of the system, positioned within the control network, making this vulnerability Low risk in properly segmented OT deployments.

  • MitigationAutomation Studioabb_psirt

    Refer to section “General security recommendations” for advice on how to keep your system secure.

  • MitigationB&R Automation Studiocisa_csaf_ot

    Refer to section “General security recommendations” for advice on how to keep your system secure.

02

cvss

Technical severity, 0–10. One row per scoring source.

9.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5–9.8

v3.17.7highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:Lprimary · NVD / NIST USexploitability 1.8 · impact 5.3
v3.17.7highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:Lsecondary · CISA US
v3.15mediumAV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · FSTEC (BDU) RU
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · OSV
v3.17.7highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:Lsecondary · Siemens ProductCERT DE
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · ABB PSIRT
v4.07.2highCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Greensecondary · cve-coordination@google.com
v4.07.2highCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Greensecondary · CVSS-BT (t0sche)
v4.07.2highCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Greensecondary · ENISA EU
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-197USCWE-197USCWE-197USCWE-197USCWE-197USCWE-197USCWE-197US
05

exploits (1)

Public proof-of-concept and weaponised exploit code.

06

affected products (438)

Products and version ranges known to be affected.

showing 20 of 438
07

advisories (38)

Vendor and ecosystem advisories describing this.

  • 4HZM000604ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (SQLite 3.2.4)2026-03-26csaf · abb_psirtCH

    ABB is aware of public reports of vulnerabilities in a 3rd party dependency SQLite Version 3.2.4 which was delivered together with the installation package of Camera Connect Version 2.0.0.42 and below. An update is available that resolves a privately reported outdated 3rd party component with vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited any of these vulnerabilities in the 3rd party component could potentially compromise the system in different ways.

  • NCSC-2025-0290Kwetsbaarheden verholpen in Apple macOSNL2025-09-16csaf · ncsc_nlNL

    Apple heeft kwetsbaarheden verholpen in macOS.

  • NCSC-2025-0291Kwetsbaarheden verholpen in Apple iOS en iPadOSNL2025-09-16csaf · ncsc_nlNL

    Apple heeft kwetsbaarheden verholpen in iOS en iPadOS.

  • NCSC-2025-0330Kwetsbaarheden verholpen in Oracle Communications productenNL2025-10-23csaf · ncsc_nlNL

    Oracle heeft meerdere kwetsbaarheden verholpen in zijn Communications producten, waaronder de Unified Assurance en Cloud Native Core.

  • NCSC-2025-0333Kwetsbaarheden verholpen in Oracle Financial ServicesNL2025-10-23csaf · ncsc_nlNL

    Oracle heeft kwetsbaarheden verholpen in Oracle Financial Services componenten.

  • NCSC-2025-0339Kwetsbaarheden verholpen in Oracle MySQLNL2025-10-23csaf · ncsc_nlNL

    Oracle heeft kwetsbaarheden verholpen in Oracle MySQL (Specifiek voor versies 8.0.0-8.0.43, 8.4.0-8.4.6, en 9.0.0-9.4.0).

  • NCSC-2026-0023Kwetsbaarheden verholpen in Oracle PeopleSoftNL2026-01-21csaf · ncsc_nlNL

    Oracle heeft kwetsbaarheden verholpen in Oracle PeopleSoft.

  • NCSC-2026-0032Kwetsbaarheden verholpen in Oracle MySQLNL2026-01-21csaf · ncsc_nlNL

    Oracle heeft kwetsbaarheden verholpen in diverse Oracle MySQL componenten.

  • NCSC-2026-0079Kwetsbaarheden verholpen in Siemens productenNL2026-03-10csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als Heliox, Ruggedcom, SICAM, SIDIS en SIMATIC.

  • NCSC-2026-0112Kwetsbaarheden verholpen in Siemens productenNL2026-04-14csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten zoals Analytics Toolkit, Ruggedcom, Industrial Edge Management Pro, SIDIS en TPM.

  • NCSC-2026-0415Kwetsbaarheden verholpen in Siemens-productenNL2026-10-13csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten zoals Desigo, Industrial Plus, RUGGEDCOM, SIMATIC en SIPLUS.

  • SA25P007B&R Automation Studio Update of SQLite version2026-02-18csaf · abb_psirtCH

    ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products, the identified vulnerabilities could present potential attack vectors that might enable unauthorized access, data exposure, or remote code execution.

  • SSA-225816SSA-225816: Memory Corruption Vulnerability in RUGGEDCOM CROSSBOW Station Access Controller Before V5.82026-04-14csaf · siemens_psirtDE

    RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains a vulnerability that could allow an attacker to achieve arbitrary code execution and to create a denial of service condition. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.

  • SSA-485750SSA-485750: Multiple Vulnerabilities in SIDIS Prime Before V4.0.8002026-03-10csaf · siemens_psirtDE

    SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.

  • SSA-765416SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller2026-10-13csaf · siemens_psirtDE

    RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.

  • WID-SEC-W-2025-1646Red Hat Enterprise Linux (nodejs, perl): Mehrere SchwachstellenDeutsch2025-07-27csaf · cert_bundDE

    Ein lokaler oder entfernter authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen oder andere nicht spezifizierte Effekte zu verursachen.

  • WID-SEC-W-2025-1887cPanel cPanel/WHM: Mehrere Schwachstellen ermöglichen CodeausführungDeutsch2025-08-21csaf · cert_bundDE

    Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in cPanel cPanel/WHM ausnutzen, um beliebigen Code auszuführen, Speicherbeschädigungen zu verursachen, einen Denial-of-Service-Zustand herbeizuführen oder andere nicht näher spezifizierte Angriffe durchzuführen.

  • WID-SEC-W-2025-1905IBM QRadar SIEM Komponente: Mehrere SchwachstellenDeutsch2025-08-25csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM Komponenten ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

  • WID-SEC-W-2025-2061Apple iOS und iPadOS: Mehrere SchwachstellenDeutsch2025-09-15csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

  • WID-SEC-W-2025-2063Apple macOS Sequoia, Sonoma und Tahoe: Mehrere SchwachstellenDeutsch2025-09-15csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um Root-Rechte zu erlangen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen preiszugeben, Daten zu verändern oder Sicherheitsmaßnahmen zu umgehen.

  • WID-SEC-W-2025-2213IBM AIX: Schwachstelle ermöglicht CodeausführungDeutsch2025-10-06csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM AIX und IBM VIOS ausnutzen, um Code auszuführen.

  • WID-SEC-W-2025-2356Oracle Financial Services Applications: Mehrere SchwachstellenDeutsch2025-10-21csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Financial Services Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

  • WID-SEC-W-2025-2360Oracle Communications Applications: Mehrere SchwachstellenDeutsch2025-10-21csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

  • WID-SEC-W-2025-2361Oracle Communications: Mehrere SchwachstellenDeutsch2025-10-21csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

  • WID-SEC-W-2025-2363Oracle MySQL: Mehrere SchwachstellenDeutsch2025-10-21csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

  • WID-SEC-W-2025-2648IBM AIX und VIOS: Mehrere SchwachstellenDeutsch2025-11-19csaf · cert_bundDE

    Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM AIX und IBM VIOS ausnutzen, um Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder eine Speicherbeschädigung durchzuführen.

  • WID-SEC-W-2026-0165Oracle Siebel CRM: Mehrere SchwachstellenDeutsch2026-01-20csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Siebel CRM ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

  • WID-SEC-W-2026-0167Oracle PeopleSoft: Mehrere SchwachstellenDeutsch2026-01-20csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle PeopleSoft ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

  • WID-SEC-W-2026-0168Oracle MySQL: Mehrere SchwachstellenDeutsch2026-01-20csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

  • WID-SEC-W-2026-1104Microsoft Windows: Mehrere SchwachstellenDeutsch2026-04-14csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Produkten ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, um beliebigen Programmcode auszuführen, um falsche Informationen darzustellen, um einen Denial of Service Angriff durchzuführen, und um einen nicht näher spezifizierten Angriff durchzuführen.

  • WID-SEC-W-2026-1118Dell PowerProtect Data Domain OS: Mehrere SchwachstellenDeutsch2026-04-14csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain OS ausnutzen, um beliebigen Code auszuführen – sogar mit Root-Rechten –, um erweiterte Rechte zu erlangen – einschließlich Administratorrechte –, um Sicherheitsmaßnahmen zu umgehen, um Daten zu manipulieren, um vertrauliche Informationen offenzulegen oder um andere, nicht näher spezifizierte Angriffe durchzuführen.

  • WID-SEC-W-2026-1194Oracle Communications: Mehrere SchwachstellenDeutsch2026-04-21csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

  • GHSA-2m69-gcr7-jv3qSQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite2025-07-15ghsa · osvUS

    There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

  • ICSA-26-071-03Siemens SIDIS Prime2026-03-10icsa · cisa_csaf_otUS

    SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.

  • ICSA-26-111-08Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)2026-04-14icsa · cisa_csaf_otUS

    RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains a vulnerability that could allow an attacker to achieve arbitrary code execution and to create a denial of service condition. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.

  • ICSA-26-141-03ABB B&R Automation Studio2026-02-18icsa · cisa_csaf_otUS

    ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products, the identified vulnerabilities could present potential attack vectors that might enable unauthorized access, data exposure, or remote code execution.

  • ICSA-26-295-15Siemens RUGGEDCOM CROSSBOW Station Access Controller2026-10-13icsa · cisa_csaf_otUS

    RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.

  • BIT-sqlite-2025-6965Integer Truncation on SQLite2025-07-16vendor · osvUS

    There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

08

also known as (11)

Other names and identifiers for this entity.

09

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bduosvabb_psirtcert_bundcisa_csaf_otncsc_nlsiemens_psirtNVDCVE.orgMITRE
published 2025-07-15modified 2026-10-15
10

references (20)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan