Siemens SICAM SIAPP SDK File Deletion Vulnerability Allowing Denial-of-Service

A vulnerability exists in Siemens SICAM SIAPP SDK versions prior to V2.1.7, where the application deletes files without properly validating the file path. This flaw could allow an attacker to remove files or sockets that the process is permitted to access, leading to a denial-of-service condition or disruption of service.

Impact

Exploitation of this vulnerability could cause a denial-of-service condition or disrupt services by allowing unauthorized file or socket deletion.

Remediation

Users are advised to update to SICAM SIAPP SDK version V2.1.7 or later. The latest version can be downloaded from the Siemens GitHub repository.