Description
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell commands with caller-provided strings and executes them. An attacker could influence the executed command, potentially resulting in command injection and full system compromise.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM SIAPP SDK | < V2.1.7 | V2.1.7 |
Advisories 4
- ICSA-26-076-04 Siemens SICAM SIAPP SDK CISA ICS & IT advisories · Mar 17, 2026
- WID-SEC-2026-0654 Siemens SICAM SIAPP SDK: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 10, 2026
- NCSC-2026-0079 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Mar 10, 2026
- SSA-903736 SSA-903736: Multiple vulnerabilities in SICAM SIAPP SDK before V2.1.7 Siemens ProductCERT · Mar 10, 2026