Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8). User Administrators are allowed to administer groups they belong to. This could allow an authenticated User Administrator to escalate their own privileges and grant themselves access to any device group at any access level.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) | < V5.8 | V5.8 |
Advisories 3
- ICSA-26-111-02 Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary CISA ICS & IT advisories · Apr 21, 2026
- NCSC-2026-0112 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Apr 14, 2026
- SSA-741509 SSA-741509: Privilege Escalation Vulnerability in RUGGEDCOM CROSSBOW Secure Access Manager Primary Before V5.8 Siemens ProductCERT · Apr 14, 2026