CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 15:53.

Filters

1 active

Reset filters

Search: SSA-508506

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SSA-508506

SSA-508506: Multiple Vulnerabilities in RUGGEDCOM CROSSBOW

Siemens — RUGGEDCOM CROSSBOW

Siemens ProductCERThigh

Published

13 October 2026

Last update

13 October 2026

Linked CVEs

CVE-2026-89196 CVE-2026-89197 CVE-2026-89198 CVE-2026-89199 CVE-2026-89200 CVE-2026-89201 CVE-2026-89202 CVE-2026-89203

Affected sectors

Risk evaluation

RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.

Mitigation summary

Update to V6.0 or later version

Revision history (1)

Initial publication — 13 October 2026
Publication Date

Official source: Siemens ProductCERT