Denial-of-Service Vulnerability in CPCI85 and RTUM85 Products by Siemens

CVE-2026-27663

What is CVE-2026-27663?

A denial-of-service vulnerability has been identified in Siemens CPCI85 Central Processing/Communication and RTUM85 RTU Base products. This vulnerability arises when the affected applications are exposed to a remote operation mode and are subjected to a high volume of requests. Such an environment creates a condition of resource exhaustion, causing the applications to become unresponsive. If multiple requests are sent concurrently, they can deplete the available resources, necessitating a reset or reboot of the system to restore normal functionality. Users should exercise caution and implement mitigation strategies to safeguard their systems.

References