4.3
Moyenne
CVE-2026-89203 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
Description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RUGGEDCOM CROSSBOW 6.0 | premières → < 6.0 | 6.0 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de RUGGEDCOM CROSSBOW
Les 29 CVE de RUGGEDCOM CROSSBOW →
CVE-2026-89206
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
6.3
Moyenne
CVE-2026-89205
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
6.3
Moyenne
CVE-2026-89204
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
5.4
Moyenne
CVE-2026-89202
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
6.5
Moyenne