View CSAF

Summary

RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.

The following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected:

RUGGEDCOM CROSSBOW Station Access Controller (SAC) vers:intdot/<6.0 (CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824)

CVSS Vendor Equipment

v3 9.8 Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)

4 Vulnerabilities

Numeric Truncation Error, Improper Clearing of Heap Memory Before Release ('Heap Inspection'), Improper Handling of Unicode Encoding, Heap-based Buffer Overflow

Background

Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare…