High ICSA-26-295-12 11 CVEs

Siemens RUGGEDCOM CROSSBOW

Published Oct 13, 2026 · Updated Oct 22, 2026 · Revision 2

Vendor: Siemens Product: RUGGEDCOM CROSSBOW

Summary

RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service.

Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.

Vulnerabilities 11

High 8.8

CVE-2026-89196

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
High 8.8

CVE-2026-89197

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
High 8.8

CVE-2026-89198

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
High 8.8

CVE-2026-89199

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
High 7.5

CVE-2026-89201

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 6.7

CVE-2026-89200

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 6.5

CVE-2026-89202

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 6.3

CVE-2026-89205

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 6.3

CVE-2026-89206

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 5.4

CVE-2026-89204

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 4.3

CVE-2026-89203

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026

Revision history

2026-10-22 #2
Initial CISA Republication of Siemens ProductCERT SSA-508506 advisory
2026-10-13 #1
Publication Date

References

SSA-508506: Multiple Vulnerabilities in RUGGEDCOM CROSSBOW - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-508506.html
ICS Advisory icsa-26-295-12 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b