CYBERSECURITYTRACKER
Permanent story citation

Siemens PSS(R)SINCAL

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11103

As cited

Copy frozen at (site build).

vulnerabilities

Siemens PSS(R)SINCAL

Siemens PSS(R)SINCAL contains CVE-2026-84854, an out-of-bounds write vulnerability in the WibuKey third-party driver that could cause system crashes or kernel memory modification. The vulnerability affects versions 21.5, 22.0, and 22.5 (before update 5) when configured with legacy WibuKey dongle licensing. Siemens recommends installing WibuKey Runtime for Windows 6.72 or later, or updating to PSS(R)SINCAL version 22.5 update 5 or later.

Why it matters: Operators of critical power systems, transportation, and healthcare facilities using affected PSS(R)SINCAL versions must apply patches or the WibuKey driver update to prevent denial-of-service conditions that could disrupt grid reliability and operational systems.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary