PT-2026-24221 · Siemens+1 · Sicam Siapp Sdk

Publicado 2026-03-10 · Atualizado 2026-03-18 · CVE-2026-25571

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SICAM SIAPP SDK versions prior to 2.1.7

Description The SICAM SIAPP SDK client component does not properly validate the length of certain variables before use. This can allow an attacker to send oversized input, potentially triggering a stack overflow, crashing the process, and leading to a denial of service. The vulnerability is related to incorrect handling of length parameters.

Recommendations Versions prior to 2.1.7 should be updated to version 2.1.7 or later.

Correção

Enumeração de Fraquezas

CWE-130

Identificadores relacionados

BDU:2026-02983

CVE-2026-25571

Produtos afetados

Sicam Siapp Sdk

Referências · 6

• https://osv.dev/vulnerability/CVE-2026-25571 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2034136494265208882 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-25571 · Nota de Segurança
• https://cert-portal.siemens.com/productcert/html/ssa-903736.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-02983 · Nota de Segurança
• https://twitter.com/infoflowcloud/status/2034138245584363843 · Publicação no Twitter