Siemens PSS(R)SINCAL
Summary
Siemens PSS(R)SINCAL software is affected by an out-of-bounds write vulnerability in the WibuKey third-party product. This vulnerability, tracked as CVE-2026-84854, could allow an attacker to cause a system crash leading to a denial-of-service condition, particularly when using the legacy WibuKey dongle license type. Siemens is developing updates and recommends mitigations for affected versions.
IFF Assessment
The vulnerability allows for a denial-of-service condition, which is detrimental to defenders.
Severity
Defender Context
This vulnerability in Siemens PSS(R)SINCAL, a product used in critical infrastructure, poses a significant risk of denial-of-service attacks. Defenders should prioritize patching or applying mitigations to systems running affected versions, especially those using the legacy WibuKey dongle.