CISA 2026-10-22

Siemens RUGGEDCOM CROSSBOW

Machine-generated analysis · WAYSCloud LLM

Versions of Siemens RUGGEDCOM CROSSBOW earlier than 6.0 are affected by multiple high-severity vulnerabilities. Siemens advises updating to version 6.0 or later.

Context

Siemens RUGGEDCOM CROSSBOW is an industrial networking product. The advisory states that versions prior to 6.0 contain SQL injection and privilege-escalation flaws that could let an authenticated attacker execute arbitrary SQL, retrieve admin credentials, and cause denial-of-service. Siemens has released a new version and recommends upgrading to V6.0 or later.

Operator considerations

Check: Identify any RUGGEDCOM CROSSBOW devices running a version earlier than 6.0.
Isolate: Segment vulnerable devices from untrusted networks until they are patched.
Patch: Apply the Siemens-provided update to version 6.0 or later.
Log: Monitor for unusual SQL queries or authentication attempts on the device.

From Cybersecurity and Infrastructure Security Agency ↗

RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.

The following versions of Siemens RUGGEDCOM CROSSBOW are affected:

RUGGEDCOM CROSSBOW vers:intdot/

Read the full advisory on CISA →