What is the CVSS score of CVE-2026-25570?

CVE-2026-25570 has a CVSS 3.1 base score of 7.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Sicam Siapp Sdk are affected by CVE-2026-25570?

A stack overflow vulnerability in SICAM SIAPP SDK (CVE-2026-25570) affects all versions prior to V2.1.7 and could allow attackers to crash systems or execute arbitrary code through malformed input.

How to fix or mitigate CVE-2026-25570?

Within 24 hours: Inventory all systems running SICAM SIAPP SDK and identify version numbers; isolate affected systems from untrusted networks if possible. Within 7 days: Implement input validation and WAF rules to block malicious payloads targeting the vulnerable component; restrict SDK access to trusted sources only. Within 30 days: Monitor vendor updates closely and prepare for emergency patching; consider alternative solutions if vendor patch timeline is unacceptable.

Sicam Siapp Sdk CVE-2026-25570

HIGH

Stack-based Buffer Overflow (CWE-121)

2026-03-10 productcert@siemens.com

Stack Overflow Denial Of Service RCE Buffer Overflow Sicam Siapp Sdk

7.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow an attacker to perform code execution and denial of service.

AnalysisAI

Insufficient input validation in SICAM SIAPP SDK versions prior to V2.1.7 enables stack overflow attacks, permitting local attackers to execute arbitrary code or trigger denial of service. The vulnerability affects all versions below the patched release, with no currently available remediation for deployed systems. Attackers with local access can leverage malformed input to corrupt the stack and gain code execution privileges.

Technical ContextAI

Classified as CWE-121 (Stack-based Buffer Overflow). A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow an attacker to perform code execution and denial of service.