CVE-2026-25570

HIGH

7.4

Description

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow an attacker to perform code execution and denial of service.

CVE Details

CVSS v3.1 Score7.4

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityHIGH

Privileges RequiredNONE

User InteractionNONE

Published3/10/2026

Last Modified3/13/2026

Sourcenvd

Honeypot Sightings0

Affected Products

siemens:sicam_siapp_sdk

Weaknesses (CWE)

CWE-121

References

https://cert-portal.siemens.com/productcert/html/ssa-903736.html(productcert@siemens.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.