CVE-2025-4373 Siemens CVE debrief

Who should care

Siemens industrial network operators, OT/ICS asset owners, and maintenance teams responsible for the listed RUGGEDCOM and SCALANCE devices, especially where SINEC OS firmware is deployed. Vulnerability management teams should also track the Siemens advisory and CISA republication for product-specific scope and remediation details.

Technical summary

The flaw is an integer overflow in GLib's g_string_insert_unichar() path. When the character insertion position is large, the position value can overflow and result in a buffer underwrite. The advisory's CVSS vector is AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L, which aligns with a medium severity rating and indicates limited integrity and availability impact rather than confidentiality impact.

Defensive priority

Medium. This is not listed as a KEV item, but it affects industrial devices and has a vendor-provided fix path. Plan remediation with normal change-control urgency, prioritizing externally reachable or operationally sensitive assets that match the Siemens advisory scope.

Recommended defensive actions

• Identify affected Siemens devices and confirm whether they run SINEC OS firmware covered by the advisory.
• Review Siemens ProductCERT advisory SSA-089022 and CISA advisory ICSA-26-043-06 for the exact affected product list and firmware scope.
• Update affected devices to V3.3 or later using the vendor remediation guidance.
• Use maintenance windows and test plans appropriate for ICS/OT environments before applying firmware updates.
• If immediate patching is not possible, apply compensating controls from CISA ICS recommended practices and defense-in-depth guidance.
• Track the advisory revision history through the latest CISA republication for scope clarifications and updates.

Evidence notes

Source corpus ties this CVE to Siemens advisory SSA-089022 republished by CISA as ICSA-26-043-06. The provided description states the GLib g_string_insert_unichar() integer overflow can underwrite a buffer when the insertion position is large. The advisory metadata also lists a vendor fix to update to V3.3 or later, and the CVSS vector supplied is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L.

Official resources