PT-2026-24221 · Siemens+1 · Sicam Siapp Sdk

Published 2026-03-10 · Updated 2026-03-18 · CVE-2026-25571

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SICAM SIAPP SDK versions prior to 2.1.7

Description The SICAM SIAPP SDK client component does not properly validate the length of certain variables before use. This can allow an attacker to send oversized input, potentially triggering a stack overflow, crashing the process, and leading to a denial of service. The vulnerability is related to incorrect handling of length parameters.

Recommendations Versions prior to 2.1.7 should be updated to version 2.1.7 or later.

Fix

Weakness Enumeration

CWE-130

Related Identifiers

BDU:2026-02983

CVE-2026-25571

Affected Products

Sicam Siapp Sdk

References · 6

• https://osv.dev/vulnerability/CVE-2026-25571 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25571 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-903736.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02983 · Security Note
• https://twitter.com/CVEnew/status/2034136494265208882 · Twitter Post
• https://twitter.com/infoflowcloud/status/2034138245584363843 · Twitter Post