Siemens RUGGEDCOM CROSSBOW Vulnerability

Siemens RUGGEDCOM CROSSBOW

RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database.

Do this now

Apply the available fix for RUGGEDCOM CROSSBOW and review its database for tampering.

Fix it

Siemens RUGGEDCOM CROSSBOW Station Access Controller

Upgrade to Siemens RUGGEDCOM CROSSBOW Station Access Controller V6.0

Siemens RUGGEDCOM CROSSBOW

Upgrade to Siemens RUGGEDCOM CROSSBOW V6.0

First seen: 22 Oct 2026
Last update: 22 Oct 2026, 12:00 UTC
Fixed in: Siemens RUGGEDCOM CROSSBOW Station Access Controller V6.0
Siemens RUGGEDCOM CROSSBOW V6.0
Identifiers: CVE-2025-6965
CVE-2025-70873
CVE-2025-71316
CVE-2026-11822
CVE-2026-11824
CVE-2026-33387
CVE-2026-33388
CVE-2026-33389
CVE-2026-33391
CVE-2026-33920
CVE-2026-89196
CVE-2026-89197
CVE-2026-89198
CVE-2026-89199
CVE-2026-89200
CVE-2026-89201
CVE-2026-89202
CVE-2026-89203
CVE-2026-89204
CVE-2026-89205
CVE-2026-89206
CVSS: 9.8
Source: news
On the menu as: Industrial & OT

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## Siemens RUGGEDCOM CROSSBOW Vulnerability
Severity: critical. Patch status: patched.
Affected: Siemens RUGGEDCOM CROSSBOW
Fixed in: Siemens RUGGEDCOM CROSSBOW Station Access Controller V6.0, Siemens RUGGEDCOM CROSSBOW V6.0
Ids: CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824, CVE-2026-33387, CVE-2026-33388, CVE-2026-33389, CVE-2026-33391, CVE-2026-33920, CVE-2026-89196, CVE-2026-89197, CVE-2026-89198, CVE-2026-89199, CVE-2026-89200, CVE-2026-89201, CVE-2026-89202, CVE-2026-89203, CVE-2026-89204, CVE-2026-89205, CVE-2026-89206

RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database.

## Steps
1. Search the repo, its CI and infra config for Siemens RUGGEDCOM CROSSBOW. If present, report the version in use and whether it's affected.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2025-6965") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12 https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18 https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15
https://pwned.coffee/i/siemens-ruggedcom-crossbow-vulnerability

Receipt

Exploitation: Public exploit code, no attacks reported
CISA ADP “CISA ADP rates exploitation of CVE-2025-6965 "poc" (SSVC).” source
Fix by release line: Product Affected Fixed in Source
Siemens RUGGEDCOM CROSSBOW Station Access Controller before V6.0 V6.0 CISA advisory
Siemens RUGGEDCOM CROSSBOW before V6.0 V6.0 CISA advisory
Score: CVSS 9.8 (critical). CVSS 3.1 9.8 (CNA cisa-cg) for CVE-2025-71316
Last checked: 24 Oct 2026, 17:17 UTC

Product	Affected	Fixed in	Source
Siemens RUGGEDCOM CROSSBOW Station Access Controller	before V6.0	V6.0	CISA advisory
Siemens RUGGEDCOM CROSSBOW	before V6.0	V6.0	CISA advisory

Sources: KEV – CVE record ✓ Vendor ✓

Sources

Totalone very hot coffee