PT-2026-24223 · Siemens+1 · Sicam Siapp Sdk

Published 2026-03-10 · Updated 2026-03-18 · CVE-2026-25573

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SICAM SIAPP SDK versions prior to 2.1.7

Description The application constructs shell commands using strings provided by the user and then executes these commands. This can allow an attacker to manipulate the executed command, potentially leading to command injection and complete system compromise. The application improperly handles external control of file names or paths, which could allow an attacker to execute arbitrary commands.

Recommendations Update SICAM SIAPP SDK to version 2.1.7 or later.

Fix

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2026-02984

CVE-2026-25573

Affected Products

Sicam Siapp Sdk

References · 7

• https://cert-portal.siemens.com/productcert/html/ssa-903736.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02984 · Security Note
• https://osv.dev/vulnerability/CVE-2026-25573 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25573 · Security Note
• https://twitter.com/infoflowcloud/status/2034138162855837940 · Twitter Post
• https://twitter.com/dailycve/status/2032240809588764797 · Twitter Post
• https://twitter.com/CVEnew/status/2034136492235206872 · Twitter Post