CVE-2026-27664

🗓️ 26 Mar 2026 14:03:21Reported by siemensType

cve🔗 web.nvd.nist.gov👁 4 Views🌐 WEB

Out-of-bounds write in central processing and communication and SICORE before version twenty six point ten enables unauthenticated denial of service via crafted inputs.

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2026-27664	26 Mar 202614:03	–	attackerkb
Circl	CVE-2026-27664	26 Mar 202614:45	–	circl
CNNVD	Siemens多款产品缓冲区错误漏洞	26 Mar 202600:00	–	cnnvd
CNVD	Siemens SICAM 8 product suffers from an out-of-bounds write vulnerability	31 Mar 202600:00	–	cnvd
Cvelist	CVE-2026-27664	26 Mar 202614:03	–	cvelist
EUVD	EUVD-2026-16181	26 Mar 202615:30	–	euvd
ICS	Siemens SICAM 8 Products	26 Mar 202600:00	–	ics
NVD	CVE-2026-27664	26 Mar 202615:16	–	nvd
Packet Storm	📄 Siemens SICAM A8000 25.30 Denial of Service / Memory Corruption	15 Apr 202600:00	–	packetstorm
Positive Technologies	PT-2026-28357	26 Mar 202600:00	–	ptsecurity

[
  {
    "vendor": "Siemens",
    "product": "CPCI85 Central Processing/Communication",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V26.10",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SICORE Base system",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V26.10.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-246443.html
seclists	www.seclists.org/fulldisclosure/2026/Apr/7

Parameter	Position	Path	Description	CWE
Content-Length	request body	sicweb-ajax/auth	Unauthenticated memory corruption via crafted XML body (CVE-2026-27664)	CWE-787
XML body	request body	sicweb-ajax/auth	Unauthenticated memory corruption via crafted XML body (CVE-2026-27664)	CWE-787
Content-Type	request body	sicweb-ajax/auth	Unauthenticated memory corruption via crafted XML body (CVE-2026-27664)	CWE-787
Content-Length	request body	sicweb-ajax/rtum85/pwned	Unauthenticated Denial of Service via crafted multipart request (Content-Length overrun)	CWE-787
multipart/form-data boundary	request body	sicweb-ajax/rtum85/pwned	Unauthenticated Denial of Service via crafted multipart request (Content-Length overrun)	CWE-787
Content-Type	request body	sicweb-ajax/rtum85/pwned	Unauthenticated Denial of Service via crafted multipart request (Content-Length overrun)	CWE-787

14 Apr 2026 19:16Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.5

CVSS 48.7

EPSS0.00057

SSVC

CWE-787