CVE-2026-25569
PUBLISHED
CVSS 7.400000095367432 HIGH
The SICAM SIAPP SDK contains multiple vulnerabilities that could allow an attacker to disrupt the customer-developed SIAPP or its simulation environment. Potential impacts include denial of service within the SIAPP, corruption of SIAPP data, or exploit the simulation environment. These vulnerabilities are only exploitable if the API is used improperly or hardening measures are not applied. Siemens has released a new version for SICAM SIAPP SDK and recommends to update to the latest version.
The following versions of Siemens SICAM SIAPP SDK are affected:
SICAM SIAPP SDK vers:intdot/
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.4
Siemens
Siemens SICAM SIAPP SDK
Out-of-bounds Write, Stack-based Buffer Overflow, Improper Handling of Length Parameter Inconsistency, External Control of File Name or Path
Background
Critical Infrastructure Sectors: Critical Manufacturing
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Germany
EPSS 0.01% · 2.6th percentile