Skip to content
OpenAdvisories
Critical SSA-765416 5 CVEs

SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller

Published Oct 13, 2026 · Updated Oct 13, 2026

Vendor: Siemens Product: RUGGEDCOM CROSSBOW Station Access Controller (SAC)

Summary

RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information.

Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.

Vulnerabilities 5

  • Critical 9.8
    CVE-2025-71316

    SQLite sqldiff remote code execution via argument injection

    SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in com…

    SQLite sqldiff
  • High 7.8
    CVE-2026-11824

    SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

    SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifyi…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2025-70873

    An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier a…

    sqlite3 sqlite Debian Azure Linux
  • High 7.2
    CVE-2025-6965 Public exploit EPSS 73%

    Integer Truncation on SQLite

    There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

    SQLite SQLite qt6-qtwebengine sqlite3 Debian Ubuntu Azure Linux Alpine Wolfi NuGet
  • Medium 5.5
    CVE-2026-11822

    SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek

    SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in …

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux Alpine

Revision history

  1. #1

    Publication Date

References