Siemens SICAM Vulnerabilities Allow Denial of Service Attacks

CERT-Bund has released a security advisory (WID-SEC-2026-0889) detailing multiple vulnerabilities in Siemens SICAM SCADA systems, which can be exploited to conduct Denial of Service (DoS) attacks. The advisory assigns a CVSS base score of 7.5 (High) and a temporal score of 6.5 (Medium), indicating a significant security risk. Affected products include Siemens SICAM CPCI85, RTUM85, and SICORE, specifically versions prior to 26.10, 26.10, and 26.10.0, respectively. The advisory notes that remote attacks are possible.

Organizations utilizing the affected Siemens SICAM systems should immediately review their configurations and apply available mitigations or updates to prevent potential DoS attacks. Given the critical nature of SCADA systems in industrial processes, a failure to address these vulnerabilities could lead to significant operational disruptions. While a specific compliance deadline is not provided, prompt action is recommended to secure these systems and maintain operational continuity.