RUGGEDCOM CROSSBOW before 6.0 allows SQL injection and credential theft
Authenticated attackers can run SQL, steal admin credentials, or change configuration; Siemens says to update to V6.0 or later.
62
CVE-2026-89198
SQL injection via firmware filename in RUGGEDCOM CROSSBOW
- CVSS 4.0
- 8.7 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Siemens RUGGEDCOM CROSSBOW before V6.0 does not properly validate or sanitize the filename of an uploaded firmware file, which is a SQL injection flaw (CWE-89). An authenticated attacker who already has the specific privileges needed to upload firmware can send a crafted filename over the network and run arbitrary SQL commands against the product’s database, with high impact to confidentiality, integrity, and availability of that system. No user interaction is required beyond the attacker’s own authenticated session, and the issue does not by itself extend to a subsequent system. It affects every RUGGEDCOM CROSSBOW release older than V6.0. It is not listed in CISA’s Known Exploited Vulnerabilities catalog, and no public proof-of-concept is known.
What to do: Upgrade RUGGEDCOM CROSSBOW to V6.0 or later. Until then, limit firmware-upload rights to trusted administrators, keep the management interface off untrusted networks, and review firmware-upload and database logs for unexpected filenames or SQL activity.
| Product | Affected |
|---|---|
| Siemens RUGGEDCOM CROSSBOW | All versions < V6.0 |
Estimated exposure
nicheNo basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.
- Weakness
- CWE-89
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X