Siemens SICAM SIAPP SDK Stack Overflow Vulnerability in Server Component Allowing Denial-of-Service

A denial-of-service vulnerability has been identified in the Siemens SICAM SIAPP SDK server component, all versions prior to 2.1.7. The vulnerability arises because the server does not enforce maximum length checks on certain variables, allowing an attacker to send oversized inputs that could trigger a stack overflow. This overflow could crash the process, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability can cause a stack overflow, crashing the server process and leading to a denial-of-service condition.

Remediation

Siemens has released a new version of the SICAM SIAPP SDK. Users are advised to update to version 2.1.7 or later. The updated version is available on the Siemens GitHub repository.