What is the CVSS score of CVE-2026-25569?

CVE-2026-25569 has a CVSS 3.1 base score of 7.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Sicam Siapp Sdk are affected by CVE-2026-25569?

A high-severity out-of-bounds write vulnerability (CVE-2026-25569) affects all versions of SICAM SIAPP SDK prior to V2.1.7, with no patch currently available.

How to fix or mitigate CVE-2026-25569?

Within 24 hours: Identify all systems and applications using SICAM SIAPP SDK versions below V2.1.7 and document exposure scope. Within 7 days: Implement network segmentation to isolate affected systems and enable enhanced monitoring for exploitation attempts. Within 30 days: Upgrade to SICAM SIAPP SDK V2.1.7 or later once available, or migrate to alternative solutions if the vendor patch is delayed.

Sicam Siapp Sdk CVE-2026-25569

HIGH

Out-of-bounds Write (CWE-787)

2026-03-10 productcert@siemens.com

Denial Of Service RCE Buffer Overflow Memory Corruption Sicam Siapp Sdk

7.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability exists in SICAM SIAPP SDK. This could allow an attacker to write data beyond the intended buffer, potentially leading to denial of service, or arbitrary code execution.

AnalysisAI

Out-of-bounds write vulnerability in SICAM SIAPP SDK versions prior to V2.1.7 allows local attackers to corrupt memory and achieve arbitrary code execution or denial of service. The vulnerability requires local access and specific conditions to trigger, but no patch is currently available. Affected organizations using vulnerable SDK versions should immediately implement compensating controls or upgrade to V2.1.7 or later.

Technical ContextAI

Classified as CWE-787 (Out-of-bounds Write). A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability exists in SICAM SIAPP SDK. This could allow an attacker to write data beyond the intended buffer, potentially leading to denial of service, or arbitrary code execution.