Summary
The SICAM SIAPP SDK contains multiple vulnerabilities that could allow an attacker to disrupt the customer-developed SIAPP or its simulation environment. Potential impacts include denial of service within the SIAPP, corruption of SIAPP data, or exploit the simulation environment. These vulnerabilities are only exploitable if the API is used improperly or hardening measures are not applied.
Siemens has released a new version for SICAM SIAPP SDK and recommends to update to the latest version.
Vulnerabilities 6
-
High 7.4
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability ex…
-
High 7.4
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform ch…
-
High 7.4
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell c…
-
Medium 6.7
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file …
-
Medium 5.1
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK client component do…
-
Medium 5.1
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK server component do…
Revision history
-
#1
Publication Date
References
-
SSA-903736: Multiple vulnerabilities in SICAM SIAPP SDK before V2.1.7 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-903736.html