RUGGEDCOM CROSSBOW Station Access Controller (SAC) vulnerabilities
8 known vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller (SAC) from Siemens. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
SQLite: Heap-based Buffer Overflow
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifyin
- 9.8 Critical severity
sqldiff: Improper Handling of Unicode Encoding
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in comm
- 7.5 High severity
RUGGEDCOM CROSSBOW Station Access Controller…: Improper Clearing of Heap Memory Before Release
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
- 7.7 High severity
SQLite: Numeric Truncation Error
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
- 9.8 Critical severity
sqlite: Integer Overflow or Wraparound
An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap
- 7.5 High severity
SQLite: Integer Overflow or Wraparound
In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer over
- 7.3 High severity
SQLite3: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer o
- 7.5 High severity
OpenSSL: Loop with Unreachable Exit Condition
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or ex