WID-SEC-W-2026-0654

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Siemens SICAM SIAPP SDK: Mehrere Schwachstellen

view advisory published 2026-03-09

Ein lokaler Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service zu verursachen oder das System vollständig zu kompromittieren.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2026-25605UShigh7.1—
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file deletion without properly validating the file path or target.…
CVE-2026-25573UShigh7.8—
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell commands with caller-provided strings and executes them. An at…
CVE-2026-25572USmedium5.5—
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK server component does not enforce maximum length checks on certain variables bef…
CVE-2026-25571USmedium5.5—
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK client component does not enforce maximum length checks on certain variables bef…
CVE-2026-25570UShigh7.8—
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow.…
CVE-2026-25569UShigh7.8—
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability exists in SICAM SIAPP SDK. This could allow an attacker to writ…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan