CVE-2026-89205

Published: Ott 13, 2026 Last Modified: Ott 13, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM 6,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: low

Description

AI Translation Available

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.

602

Client-Side Enforcement of Server-Side Security

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Availability
Potential Impacts:
Bypass Protection Mechanism Dos: Crash, Exit, Or Restart Gain Privileges Or Assume Identity
Applicable Platforms
Technologies: ICS/OT, Mobile
Likelihood of Exploit: Medium
View CWE Details
https://cert-portal.siemens.com/productcert/html/ssa-508506…
https://cert-portal.siemens.com/productcert/html/ssa-508506.html