PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-69277 Siemens CVE debrief

CVE-2025-69277 is a medium-severity flaw in Siemens SIDIS Prime versions before 4.0.800. In atypical custom-cryptography or untrusted-input scenarios, an embedded libsodium validation check can sometimes accept elliptic-curve points that should not be treated as valid.

Vendor
Siemens
Product
SIDIS Prime
CVSS
MEDIUM 4.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-03-10
Original CVE updated
2026-03-12
Advisory published
2026-03-10
Advisory updated
2026-03-12

Who should care

Siemens SIDIS Prime operators, OT security teams, and developers or integrators who use the affected crypto validation path with custom cryptography or untrusted data.

Technical summary

The supplied CISA CSAF advisory (ICSA-26-071-03) and Siemens ProductCERT material describe a libsodium issue affecting crypto_core_ed25519_is_valid_point before ad3004e. In the SIDIS Prime context, the validation logic can mishandle certain elliptic-curve point checks and sometimes allow points outside the intended cryptographic group. The vendor remediation is to update to V4.0.800 or later. The supplied CVSS vector is CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N with a score of 4.5.

Defensive priority

Medium — prioritize patching for any SIDIS Prime deployment below V4.0.800, especially where custom cryptography or untrusted inputs can reach the affected validation routine.

Recommended defensive actions

  • Update Siemens SIDIS Prime to V4.0.800 or later.
  • Review any custom cryptography or integration code that calls the affected libsodium validation routine with untrusted input.
  • Confirm whether deployed configurations actually exercise the affected path and document the exposure assessment.
  • Track Siemens and CISA advisories for any follow-on guidance and verify patch status across OT assets.

Evidence notes

Timing context in the supplied record shows publication on 2026-03-10 and modification/republication on 2026-03-12. The CISA CSAF source ties CVE-2025-69277 to Siemens SIDIS Prime and points to Siemens ProductCERT advisory SSA-485750. The only remediation listed in the corpus is to update to V4.0.800 or later.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-69277 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-69277

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-69277 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-69277

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-071-03.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-485750.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-485750.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-26-071-03.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-03

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.