Siemens SICAM SIAPP SDK Stack Overflow Vulnerability Allowing Code Execution and Denial-of-Service

A stack-based buffer overflow vulnerability has been identified in Siemens SICAM SIAPP SDK, affecting all versions prior to 2.1.7. The vulnerability arises because the SDK does not properly validate input values, potentially leading to a stack overflow. This flaw could be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in arbitrary code execution and a denial-of-service condition, causing the application to crash or become unresponsive.

Remediation

Users are advised to update to SICAM SIAPP SDK version 2.1.7 or later. The latest version can be downloaded from the Siemens SICAM SIAPP SDK GitHub repository.