Siemens RUGGEDCOM CROSSBOW
RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version. The following versions of Siemens RUGGEDCOM CROSSBOW are affected: RUGGEDCOM CROSSBOW vers:intdot/ CVSS Vendor Equipment v3 8.8 Siemens RUGGEDCOM CROSSBOW 4
Read at CISA Cybersecurity Advisories
- Vendor
- Siemens
- Product
- SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal
- CVSS v3.1
- 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.002 (p7)
- Fix
- available
- Exposure class
- OT / ICS
Why it ranks 32 (Notable)
- Product class: OT / ICS
- Covered by 3 independent sources
- Fix available
- Government advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Cybersecurity Advisories (cisa.gov)
- CVE-2026-89196 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-89197 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-89198 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-89199 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-89200 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.