Siemens Sicam Siapp SDK vulnerabilities

6 CVEs affecting Siemens Sicam Siapp SDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-25605, published 2026-03-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-25573, published 2026-03-10. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell commands with caller-provided strings and executes them. An attacker could…
CVE-2026-25570, published 2026-03-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow…
CVE-2026-25569, published 2026-03-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability exists in SICAM SIAPP SDK. This could allow an attacker to write data beyond the…
CVE-2026-25605, published 2026-03-10. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file deletion without properly validating the file path or target. An attacker could…
CVE-2026-25572, published 2026-03-10. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK server component does not enforce maximum length checks on certain variables before use. This could…
CVE-2026-25571, published 2026-03-10. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK client component does not enforce maximum length checks on certain variables before use. This could…