Update RUGGEDCOM CROSSBOW Station Access Controller (SAC) to version V6.0 or later. For the integrated SQLite component, upgrade to SQLite version 3.50.2 or above (CVE-2025-6965), 3.51.1 or above (CVE-2025-70873), or 3.53.2 or above (CVE-2026-11822/2026-11824). Monitor Siemens advisories for additional patches.
Quick answers
What is CVE-2025-6965?
Update RUGGEDCOM CROSSBOW Station Access Controller (SAC) to version V6.0 or later. For the integrated SQLite component, upgrade to SQLite version 3.50.2 or above (CVE-2025-6965), 3.51.1 or above (CVE-2025-70873), or 3.53.2 or above (CVE-2026-11822/2026-11824). Monitor Siemens advisories for additional patches.
How severe is CVE-2025-6965?
critical, CVSS 9.8
Is CVE-2025-6965 known to be exploited?
It is not marked known-exploited in this record.
How should CVE-2025-6965 be mitigated?
Update RUGGEDCOM CROSSBOW Station Access Controller (SAC) to version V6.0 or later. For the integrated SQLite component, upgrade to SQLite version 3.50.2 or above (CVE-2025-6965), 3.51.1 or above (CVE-2025-70873), or 3.53.2 or above (CVE-2026-11822/2026-11824). Monitor Siemens advisories for additional patches.
CVSS
9.8
Vendor
Siemens
Published
Oct 23, 2026 · 06:08
Patch
Unknown / not confirmed
Affected products
RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0
Mitigation
Update RUGGEDCOM CROSSBOW Station Access Controller (SAC) to version V6.0 or later. For the integrated SQLite component, upgrade to SQLite version 3.50.2 or above (CVE-2025-6965), 3.51.1 or above (CVE-2025-70873), or 3.53.2 or above (CVE-2026-11822/2026-11824). Monitor Siemens advisories for additional patches.
Siemens has disclosed five vulnerabilities in the integrated SQLite component of the RUGGEDCOM CROSSBOW Station Access Controller (SAC) affecting versions earlier than V6.0. The flaws range from numeric truncation errors and heap memory issues to a critical Unicode handling vulnerability (CVE-2025-71316) with a CVSS v3.1 base score of 9.8. Siemens recommends updating to version V6.0 or later as the primary remediation. Affected sectors include critical manufacturing, transportation, energy, healthcare, finance, and government facilities worldwide.