Siemens RUGGEDCOM CROSSBOW Station Access Controller: 5 CVEs, Critical 9.8
Summary
CISA reports 5 vulnerabilities in Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC). Weakness types: Numeric Truncation Error, Improper Clearing of Heap Memory Before Release ('Heap Inspection'), Improper Handling of Unicode Encoding (+1 more). RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Highest CVSS v3 score: 9.8 (Critical), exploitable over the network.
At a glance
- Vendor
- Siemens
- Products
- RUGGEDCOM CROSSBOW Station Access Controller (SAC)
- CVEs
- CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824
- Highest CVSS v3
- 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities
- Deployed
- Worldwide
- Vendor HQ
- Germany
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2025-6965 | Numeric Truncation Error | 7.7 | – | No | CVE-2025-6965 |
| CVE-2025-70873 | Improper Clearing of Heap Memory Before Release ('Heap Inspection') | 7.5 | – | No | CVE-2025-70873 |
| CVE-2025-71316 | Improper Handling of Unicode Encoding | 9.8 | – | No | CVE-2025-71316 |
| CVE-2026-11822 | Heap-based Buffer Overflow | 7.8 | – | No | CVE-2026-11822 |
| CVE-2026-11824 | Heap-based Buffer Overflow | 7.8 | – | No | CVE-2026-11824 |
Affected products (1)
- RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Vendor fixes and mitigations (from advisory)
- Vendor Fix: Update to V6.0 or later version link
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
- CISA advisory ICSA-26-295-15
- Machine-readable CSAF record
- https://cert-portal.siemens.com/productcert/csaf/ssa-765416.json
- https://cert-portal.siemens.com/productcert/html/ssa-765416.html
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.