Siemens PSS(R)SINCAL
Brief
View CSAF
Summary
PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type.
Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable. The following versions of Siemens PSS(R)SINCAL are affected: PSS(R)SINCAL V21. 5 vers:all/* (CVE-2026-84854) PSS(R)SINCAL V22. 0 vers:all/* (CVE-2026-84854) PSS(R)SINCAL V22. 5 vers:intdot/22.
- 5 (CVE-2026-84854) CVSS Vendor Equipment
v3 7 Siemens PSS(R)SINCAL V21.5