CVE-2026-89202: High severity Siemens Ruggedcom Crossbow vulnerability
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated to RUGGEDCOM CROSSBOW and have minimal privileges. No user interaction is required.
What is the practical impact of exploitation?
An attacker can disconnect active sessions belonging to other users, including administrators. This causes a denial of service but the provided information does not indicate confidentiality or integrity impact.
Which deployments are affected?
All RUGGEDCOM CROSSBOW versions earlier than V6.0 are affected. The provided information does not identify configuration-specific prerequisites.