CVE-2026-25569 HIGH

CVE-2026-25569

Vendor Siemens
Product SICAM SIAPP SDK
Weakness CWE-787
Published March 10, 2026
Last update March 10, 2026

CVSS base score

7.4/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability exists in SICAM SIAPP SDK. This could allow an attacker to write data beyond the intended buffer, potentially leading to denial of service, or arbitrary code execution.

Key dates

02Disclosure timeline

March 10, 2026 CVE published
March 10, 2026 Record updated