High ICSA-26-076-04 6 CVEs

Siemens SICAM SIAPP SDK

Published Mar 10, 2026 · Updated Mar 17, 2026 · Revision 2

Vendor: Siemens Product: SICAM SIAPP SDK

Summary

The SICAM SIAPP SDK contains multiple vulnerabilities that could allow an attacker to disrupt the customer-developed SIAPP or its simulation environment. Potential impacts include denial of service within the SIAPP, corruption of SIAPP data, or exploit the simulation environment. These vulnerabilities are only exploitable if the API is used improperly or hardening measures are not applied.

Siemens has released a new version for SICAM SIAPP SDK and recommends to update to the latest version.

Vulnerabilities 6

High 7.4

CVE-2026-25569

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability ex…

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026
High 7.4

CVE-2026-25570

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform ch…

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026
High 7.4

CVE-2026-25573

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell c…

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026
Medium 6.7

CVE-2026-25605

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file …

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026
Medium 5.1

CVE-2026-25571

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK client component do…

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026
Medium 5.1

CVE-2026-25572

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK server component do…

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026

Revision history

2026-03-17 #2
Initial CISA Republication of Siemens ProductCERT SSA-903736 advisory
2026-03-10 #1
Publication Date

References

SSA-903736: Multiple vulnerabilities in SICAM SIAPP SDK before V2.1.7 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-903736.html
ICS Advisory ICSA-26-076-04 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-04
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b