Summary
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.
The following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected:
- RUGGEDCOM CROSSBOW Station Access Controller (SAC) vers:intdot/<6.0 (CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824)
CVSS
Vendor
Equipment
v3 9.8
Siemens
RUGGEDCOM CROSSBOW Station Access Controller (SAC)
4 Vulnerabilities
Numeric Truncation Error, Improper Clearing of Heap Memory Before Release ('Heap Inspection'), Improper Handling of Unicode Encoding, Heap-based Buffer Overflow
Background
- Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities
- Countries/Areas Deployed: Worldwide
- Company Headquarters Location: Germany
Vulnerabilities
Expand All +
CVE-2025-6965
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Read More
1 Affected Product
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Product Status: known_affected
Remediations
Vendor fix
Update to V6.0 or later version
Additional Metrics
Relevant CWE: CWE-197 Numeric Truncation Error
CVSS Version
Base Score
Base Severity
Vector String
3.1
7.7
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
CVE-2025-70873
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
Read More
2 Affected Products
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Product Status: known_affected
Remediations
Vendor fix
Update to V6.0 or later version
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Product Status: known_affected
Remediations
Vendor fix
Update to V6.0 or later version
Additional Metrics
Relevant CWE: CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CVSS Version
Base Score
Base Severity
Vector String
3.1
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE-2025-71316
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being misinterpreted as command line options. Fixed on or around 2025-12-26.
Read More
3 Affected Products
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Product Status: known_affected
Remediations
Vendor fix
Update to V6.0 or later version
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Product Status: known_affected
Remediations
Vendor fix
Update to V6.0 or later version
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Product Status: known_affected
Remediations
Vendor fix
Update to V6.0 or later version
Additional Metrics
Relevant CWE: CWE-176 Improper Handling of Unicode Encoding
CVSS Version
Base Score
Base Severity
Vector String
3.1
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE-2026-11822
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.
Read More
4 Affected Products
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Product Status: known_affected
Remediations
Vendor fix
Update to V6.0 or later version
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Product Status: known_affected
Remediations
Vendor fix
Update to V6.0 or later version
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Product Status: known_affected
Remediations
Vendor fix
Update to V6.0 or later version
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Product Status: known_affected
Remediations
Vendor fix
Update to V6.0 or later version
Additional Metrics
Relevant CWE: CWE-122 Heap-based Buffer
[…]
Content was trimmed to protect the source. Please visit the original article for the full text.
Read the original article: