{"id":"CVE-2026-89198","published":"2026-10-13T10:17:21.200","lastModified":"2026-10-15T20:38:04.303","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-508506.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The vulnerability allows authenticated attackers to inject arbitrary SQL commands through improperly sanitized firmware filenames, potentially leading to full database compromise. This affects RUGGEDCOM CROSSBOW devices running versions before V6.0.","exploitability":"Exploitation requires an authenticated user with specific privileges and is moderately difficult to achieve, as it involves crafting a malicious firmware filename that triggers SQL injection during the upload process.","blast_radius":"If exploited, this vulnerability could allow attackers to access sensitive operational data, modify critical configurations, or potentially disrupt industrial operations across multiple RUGGEDCOM CROSSBOW devices in the field.","remediation":"Upgrade to firmware version V6.0 or later to remediate this SQL injection vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sql-injection","firmware-upload","industrial-control"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:03:37.794Z"}}