Skip to content
fr Sign in
7.5 High

CVE-2025-30175 A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC…

Description

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound write buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.

Affected products and versions

Product Affected versions Fixed in
SIMATIC PCS neo V4.1 Versions not published
SIMATIC PCS neo V5.0 Versions not published
SINEC NMS 4.0 earliest → < 4.0 4.0
SINEMA Remote Connect Versions not published
Totally Integrated Automation Portal (TIA Portal) V17 Versions not published
Totally Integrated Automation Portal (TIA Portal) V18 Versions not published
Totally Integrated Automation Portal (TIA Portal) V19 Versions not published
Totally Integrated Automation Portal (TIA Portal) V20 Versions not published
User Management Component (UMC) 2.15 earliest → < 2.15.1.1 2.15.1.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC PCS neo V4.1

The 12 CVEs of SIMATIC PCS neo V4.1 →
CVE-2025-40798 A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC… 7.5 High CVE-2025-40797 A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC… 7.5 High CVE-2025-40796 A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC… 7.5 High CVE-2025-40795 A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC… 9.8 Critical
Track this CVE