The SICAM SIAPP SDK deletes files or sockets without validating the file path or target. An attacker who can influence the deletion operation may remove any file or socket that the process is permitted to delete, leading to denial of service or service disruption. This vulnerability maps to CWE-73, the improper validation of a path causing unintended file operations.

Siemens SICAM SIAPP SDK, all versions earlier than 2.1.7.

The CVSS score of 5.9 indicates moderate severity. EPSS is below 1%, suggesting a low probability of exploitation in the wild. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, and no remote exploitation vectors are disclosed. Likely exploitation requires the attacker to run code on or provide input to the SDK on the target system, making it a local or privilege‑elevated threat. The impact is limited to files and sockets that the SDK process can delete, but removal of critical files could interrupt critical services.