Out-of-Bounds Write Vulnerability in CPCI85 and SICORE Base System by Siemens

CVE-2026-27664

What is CVE-2026-27664?

A vulnerability has been identified in Siemens' CPCI85 Central Processing/Communication and SICORE Base System, allowing for an out-of-bounds write condition. This issue arises when parsing specially crafted XML inputs, which can lead to unauthorized access. An attacker could potentially exploit this vulnerability by sending a malicious XML request, causing the affected service to crash and resulting in a denial-of-service situation. Organizations utilizing these systems are advised to take appropriate measures to remediate this vulnerability.

References