CVE-2026-25572 — Siemens / SICAM SIAPP SDK

CVE-2026-25572

Siemens / SICAM SIAPP SDK PUBLISHED

Description (CNA)

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK server component does not enforce maximum length checks on certain variables before use. This could allow an attacker to send an oversized input that could trigger a stack overflow crashing the process and potentially causing denial of service.

Affected (CNA)

Vendor / product	Versions
Siemens / SICAM SIAPP SDK	affected 0 before V2.1.7

CWE

CWE-130

References

https://cert-portal.siemens.com/productcert/html/ssa-903736.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.