CVE-2026-25605

MEDIUM

SICAM SIAPP SDK <V2.1.7 - Path Traversal

Title source: llm

Description

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file deletion without properly validating the file path or target. An attacker could delete files or sockets that the affected process has permission to remove, potentially resulting in denial of service or service disruption.

References (1)

[Vendor Advisory] https://cert-portal.siemens.com/productcert/html/ssa-903736.html

Scores

CVSS v3 6.7

EPSS 0.0002

EPSS Percentile 4.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Classification

CWE

CWE-73

Status draft

Timeline

Published Mar 10, 2026

Tracked Since Mar 11, 2026