Siemens RUGGEDCOM CROSSBOW Station Access Controller
Act NowCVSS 9.8ICS-CERT ICSA-26-295-15Oct 13, 2026
Siemens
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.
What this means
What could happen
Could allow full system compromise: read data, modify settings, and disrupt operations
Who's at risk
Organizations in critical infrastructure using Siemens equipment
How it could be exploited
Attacker on the corporate network or internet could reach this device without any credentials. The attack is straightforward with no special conditions
Exploitability
Likely to be exploited - EPSS score 73.3%
Affected products (1)
ProductAffected VersionsFix Status
Remediation & Mitigation
0/1
Schedule - requires maintenance window
0/1Patching may require device reboot, plan for process interruption
UPGRADEUpdate to V6.0 or later version
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/e96c935b-3d35-40a1-845c-67d4f123fc25Get OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.