Description
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0). The affected application contains an out-of-bounds write vulnerability while parsing specially crafted XML inputs. This could allow an unauthenticated attacker to exploit this issue by sending a malicious XML request, which may cause the service to crash, resulting in a denial-of-service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | CPCI85 Central Processing/Communication | < V26.10 | V26.10 |
| Siemens | SICORE Base system | < V26.10.0 | V26.10.0 |
Advisories 3
- ICSA-26-092-01 Siemens SICAM 8 Products CISA ICS & IT advisories · Apr 2, 2026
- WID-SEC-2026-0889 Siemens SICAM: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Mar 26, 2026
- SSA-246443 SSA-246443: Multiple Vulnerabilities in SICAM 8 Products Siemens ProductCERT · Mar 26, 2026