What is CVE-2026-25570?

CVE-2026-25570 is a high-severity vulnerability in Siemens Sicam Siapp Sdk, classified under Stack-based Buffer Overflow. CVSS score: 7.4/10. Published 2026-03-10.

How severe is CVE-2026-25570?

High severity. CVSS v3 base score is 7.4 out of 10.

Buffer overflow in Siemens Sicam Siapp Sdk

CVE-2026-25570

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow an attacker to perform code execution and denial of service.

Vulnerability class: Buffer Overflow

EPSS: 0.001 (4.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Siemens Sicam Siapp Sdk — versions 0
Siemens Sicam_siapp_sdk

Weakness classification (CWE)

CWE-121 — Stack-based Buffer Overflow

References

productcert@siemens.com (Vendor Advisory)

Frequently asked questions

What is CVE-2026-25570?: CVE-2026-25570 is a high-severity vulnerability in Siemens Sicam Siapp Sdk, classified under Stack-based Buffer Overflow. CVSS score: 7.4/10. Published 2026-03-10.
How severe is CVE-2026-25570?: High severity. CVSS v3 base score is 7.4 out of 10.