CVE-2026-89204: Medium severity Siemens Ruggedcom Crossbow vulnerability
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
RUGGEDCOM CROSSBOWto a version that resolves this vulnerability.Fixed in V6.0
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated to the affected device. The issue is remotely exploitable and does not require user interaction.
What configurations and versions are affected?
All Siemens RUGGEDCOM CROSSBOW versions earlier than V6.0 are affected. The provided information does not identify any configuration prerequisites or exceptions.
What could an attacker do after exploitation?
An authenticated attacker could access database queries used for subnet management and read, modify, or delete subnet configurations. This can result in information disclosure and manipulation of subnet-management data.