Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:sicam_siapp_sdk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSicam Siapp Sdk (fc1c75b2-c40e-5190-96d4-e8e8209e9b54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25605 vulnerable 2026-06-08 07:53:20.093806 Details available
MEDIUM (6.7)
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file deletion without properly validating the file path or target. An attacker could delete files or sockets that the affected process has permission to remove, potentially resulting in denial of service or service disruption.
Published: 2026-03-10T16:07:58.383Z
Updated: 2026-03-10T16:41:09.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25573 vulnerable 2026-06-08 07:53:20.036557 Details available
HIGH (7.4)
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell commands with caller-provided strings and executes them. An attacker could influence the executed command, potentially resulting in command injection and full system compromise.
Published: 2026-03-10T16:07:57.269Z
Updated: 2026-03-10T16:41:09.152Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25572 vulnerable 2026-06-08 07:53:20.036257 Details available
MEDIUM (5.1)
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK server component does not enforce maximum length checks on certain variables before use. This could allow an attacker to send an oversized input that could trigger a stack overflow crashing the process and potentially causing denial of service.
Published: 2026-03-10T16:07:56.157Z
Updated: 2026-03-10T16:41:09.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25571 vulnerable 2026-06-08 07:53:20.035852 Details available
MEDIUM (5.1)
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK client component does not enforce maximum length checks on certain variables before use. This could allow an attacker to send an oversized input that could trigger a stack overflow crashing the process and potentially causing denial of service.
Published: 2026-03-10T16:07:55.079Z
Updated: 2026-03-10T16:41:09.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25570 vulnerable 2026-06-08 07:53:20.035537 Details available
HIGH (7.4)
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow an attacker to perform code execution and denial of service.
Published: 2026-03-10T16:07:53.964Z
Updated: 2026-03-10T16:41:09.610Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25569 vulnerable 2026-06-08 07:53:20.035127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.