CVE-2026-25573

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell commands with caller-provided strings and executes them. An attacker could influence the executed command, potentially resulting in command injection and full system compromise.

Score

CVSS 4.0 8.6 High

Status

Analyzed - productcert@siemens.com

Published

2026-03-10

Last modified

2026-03-10

Weaknesses

CWE-73

Affected products

• Sicam Siapp Sdk (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-903736.html