Siemens RUGGEDCOM CROSSBOW Station Access Controller
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version. The following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected: RUGGEDCOM CROSSBOW Station Access Controller (SAC) vers:intdot/ CVSS Vendor Equipment v3 9.8 Siemens RUGGEDCOM CROS
Read at CISA Cybersecurity Advisories
- Vendor
- Siemens
- Product
- SQLite, SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal
- CVSS
- 3.1
- Fix
- available
- Exposure class
- Database, OT / ICS
Why it ranks 20 (Routine)
- Product class: database, OT / ICS
- Fix available
- Government advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Cybersecurity Advisories (cisa.gov)
- CVE-2025-6965 on this site · NVD · CVE.org · Vulnpedia
- CVE-2025-70873 on this site · NVD · CVE.org · Vulnpedia
- CVE-2025-71316 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-11822 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-11824 on this site · NVD · CVE.org · Vulnpedia