Our takeSiemens has published three ICS advisories covering multiple RUGGEDCOM CROSSBOW and APE1808 vulnerabilities that let attackers run arbitrary SQL, escalate privileges, steal credentials, modify configs, or DoS the device. Update to the latest version immediately if you run these in OT environments.Security Resilience desk
Sources (3)
- cisa_advisories · cisa_advisories
- cisa_advisories · cisa_advisories
- cisa_advisories · cisa_advisories
What this means for you — Security leader:Update all RUGGEDCOM CROSSBOW and SAC instances to the latest patched version immediately. Review internet exposure of any OT/ICS management interfaces and strengthen network segmentation.
What this means for you — Lean IT orgs:If you run Siemens RUGGEDCOM CROSSBOW or Station Access Controller in your operations, check with your vendor or integrator for the latest update and apply it as soon as possible.
What this means for you — MSP:Audit client environments for RUGGEDCOM CROSSBOW, SAC, and APE1808 deployments; push the Siemens updates and verify that OT networks remain segmented from enterprise and internet access.
What this means for you — Researcher:Review the three related ICS advisories (ICSA-26-295-12, -15, -18) for full CVE and mitigation details across the RUGGEDCOM product line.