CVE-2026-89199

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.

Score

CVSS 3.1 8.8 High

Status

Awaiting Analysis - productcert@siemens.com

Published

2026-10-13

Last modified

2026-10-15

Weaknesses

CWE-639

Affected products

• Ruggedcom Crossbow (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-508506.html