High WID-SEC-2026-0654 6 CVEs

Siemens SICAM SIAPP SDK: Mehrere Schwachstellen

Published Mar 9, 2026 · Updated Mar 10, 2026 · Revision 2 · de-DE

Vendor: Siemens Product: SICAM

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service zu verursachen oder das System vollständig zu kompromittieren.

Product

Siemens SICAM ist eine Produktfamilie von SCADA-Systemen für den Betrieb von industriellen Prozessen.

Vulnerabilities 6

High 7.4

CVE-2026-25569

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability ex…

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026
High 7.4

CVE-2026-25570

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform ch…

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026
High 7.4

CVE-2026-25573

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell c…

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026
Medium 6.7

CVE-2026-25605

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file …

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026
Medium 5.1

CVE-2026-25571

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK client component do…

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026
Medium 5.1

CVE-2026-25572

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK server component do…

Siemens SICAM SIAPP SDK ICS / OT

Mar 10, 2026

Revision history

2026-03-10 #2
Referenz(en) aufgenommen: EUVD-2026-10527, EUVD-2026-10526, EUVD-2026-10524, EUVD-2026-10525, EUVD-2026-10528, EUVD-2026-10529
2026-03-09 #1
Initiale Fassung

References

Siemens Security Advisory by Siemens ProductCERT vom 2026-03-09
https://cert-portal.siemens.com/productcert/html/ssa-903736.html