CVE-2026-25570

7.5 highEPSS 0.2%

High (7.5) in siemens sicam siapp sdk. EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow an attacker to perform code execution and denial of service.

Severity

CVSS 4.0

7.5 high

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-121
Published: 2026-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:sicam_siapp_sdk

References

https://cert-portal.siemens.com/productcert/html/ssa-903736.html

Check your stack JSON