Multiple out-of-bounds vulnerabilities in third-party components are affecting SITOP UPS1600 before V2.5.4. Attackers could exploit these vulnerabilities and cause limited impact in the affected systems.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
https://cert-portal.siemens.com/productcert/html/ssa-238730.html