7.5
High
CVE-2025-40797 A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…
Description
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC PCS neo V4.1 | Versions not published | |
| SIMATIC PCS neo V5.0 | Versions not published | |
| SIMATIC PCS neo V6.0 | Versions not published | |
| User Management Component (UMC) 2.15 | earliest → < 2.15.1.3 | 2.15.1.3 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SIMATIC PCS neo V4.1
The 12 CVEs of SIMATIC PCS neo V4.1 →
CVE-2025-40798
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…
7.5
High
CVE-2025-40796
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…
7.5
High
CVE-2025-40795
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…
9.8
Critical
CVE-2024-54678
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…
8.2
High