PatchSiren

PatchSiren cyber security CVE debrief

CVE-2023-7104 Siemens CVE debrief

CISA’s ICS advisory ICSA-25-100-02, based on Siemens ProductCERT advisory SSA-277137, maps CVE-2023-7104 to Siemens SIDIS Prime. The advisory describes a heap-based buffer overflow in SQLite’s sessionReadRecord path (ext/session/sqlite3session.c) and recommends updating SIDIS Prime to V4.0.700 or later. The source advisory was published on 2025-04-08 and revised on 2025-05-06 for typo fixes.

Vendor
Siemens
Product
SIDIS Prime
CVSS
HIGH 7.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-02-18
Original CVE updated
2026-05-21
Advisory published
2026-02-18
Advisory updated
2026-05-21

Who should care

Siemens SIDIS Prime operators, industrial-control-system administrators, integrators, and defenders responsible for environments that include the affected SIDIS Prime release line or embedded SQLite session components.

Technical summary

The supplied advisory metadata identifies a heap-based buffer overflow affecting SQLite3 up to 3.43.0 in the sessionReadRecord function within ext/session/sqlite3session.c. In the Siemens CSAF context, the affected product is SIDIS Prime, and the documented remediation is to update to V4.0.700 or later. The advisory’s CVSS vector is AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, which corresponds to a medium-severity exposure in the supplied data.

Defensive priority

Medium overall; prioritize quickly if SIDIS Prime is deployed in reachable or operationally sensitive ICS environments because a vendor patch is available.

Recommended defensive actions

  • Update Siemens SIDIS Prime to V4.0.700 or later, per the advisory remediation.
  • Inventory SIDIS Prime deployments and confirm whether the affected release line is present.
  • Verify patch application and document the maintenance window and rollback plan.
  • Apply standard ICS hardening and segmentation guidance from CISA recommended practices around affected systems.
  • Monitor Siemens and CISA advisory pages for any follow-up revisions or additional mitigation guidance.

Evidence notes

All core claims here come from the supplied CISA CSAF source item and its referenced Siemens advisory metadata: the affected product is Siemens SIDIS Prime; the issue description is a heap-based buffer overflow in SQLite sessionReadRecord; and the remediation is V4.0.700 or later. The advisory timeline in the corpus shows publication on 2025-04-08 and a typo-fix revision on 2025-05-06. No KEV entry is present in the supplied enrichment data.

Sources and references

Verified primary and authoritative sources

  • CVE-2023-7104 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2023-7104

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2023-7104 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2023-7104

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-100-02.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-277137.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-277137.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-02

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.