Stack Overflow Vulnerability in SICAM SIAPP SDK by Siemens
CVE-2026-25572

5.9MEDIUM

Key Information:

Vendor

Siemens
Status
Sicam Siapp Sdk
Vendor
CVE Published:
10 March 2026

What is CVE-2026-25572?

A vulnerability has been detected in the SICAM SIAPP SDK server component, present in all versions prior to V2.1.7. This issue arises from the lack of enforcement of maximum length checks on certain input variables. An attacker could exploit this flaw by supplying oversized inputs, leading to a stack overflow that may cause the server process to crash, thereby resulting in a denial of service.

Affected Version(s)

SICAM SIAPP SDK 0

References

https://cert-portal.siemens.com/productcert/html/ssa-9037...

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.