Stack Overflow Vulnerability in SICAM SIAPP SDK by Siemens
CVE-2026-25571

5.9MEDIUM

Key Information:

Vendor

Siemens
Status
Sicam Siapp Sdk
Vendor
CVE Published:
10 March 2026

What is CVE-2026-25571?

A vulnerability exists in the SICAM SIAPP SDK where the client component fails to enforce maximum length checks on certain input variables. This oversight allows attackers to exploit the system by sending oversized inputs, potentially leading to a stack overflow. The result may not only crash the application process but can also lead to a denial of service, impacting the availability of the affected systems.

Affected Version(s)

SICAM SIAPP SDK 0

References

https://cert-portal.siemens.com/productcert/html/ssa-9037...

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.