CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 15:53.

Filters

1 active

Reset filters

Search: SSA-765416

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SSA-765416

SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller

Siemens — RUGGEDCOM CROSSBOW Station Access Controller (SAC)

Siemens ProductCERTcritical

Published

13 October 2026

Last update

13 October 2026

Linked CVEs

CVE-2025-6965 CVE-2025-70873 CVE-2025-71316 CVE-2026-11822 CVE-2026-11824

Affected sectors

Risk evaluation

RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.

Mitigation summary

Update to V6.0 or later version

Revision history (1)

Initial publication — 13 October 2026
Publication Date

Official source: Siemens ProductCERT