Description
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK client component does not enforce maximum length checks on certain variables before use. This could allow an attacker to send an oversized input that could trigger a stack overflow crashing the process and potentially causing denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM SIAPP SDK | < V2.1.7 | V2.1.7 |
Advisories 4
- ICSA-26-076-04 Siemens SICAM SIAPP SDK CISA ICS & IT advisories · Mar 17, 2026
- WID-SEC-2026-0654 Siemens SICAM SIAPP SDK: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 10, 2026
- NCSC-2026-0079 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Mar 10, 2026
- SSA-903736 SSA-903736: Multiple vulnerabilities in SICAM SIAPP SDK before V2.1.7 Siemens ProductCERT · Mar 10, 2026