PT-2026-24222 · Siemens · Sicam Siapp Sdk

Published 2026-03-10 · Updated 2026-03-18 · CVE-2026-25572

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SICAM SIAPP SDK versions prior to 2.1.7

Description The SICAM SIAPP SDK server component lacks maximum length checks on specific variables before they are used. This allows an attacker to send oversized input, potentially triggering a stack overflow that crashes the process and could lead to a denial of service.

Recommendations Update to version 2.1.7 or later.

Fix

Weakness Enumeration

CWE-130

Related Identifiers

BDU:2026-05798

CVE-2026-25572

Affected Products

Sicam Siapp Sdk

References · 6

• https://bdu.fstec.ru/vul/2026-05798 · Security Note
• https://osv.dev/vulnerability/CVE-2026-25572 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-903736.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25572 · Security Note
• https://twitter.com/CVEnew/status/2034136493074088087 · Twitter Post
• https://twitter.com/infoflowcloud/status/2034138179440173361 · Twitter Post