CVE-2025-30176 — Siemens / SIMATIC PCS neo V4.1

Description (CNA)

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound read buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.

Affected (CNA)

Vendor / product	Versions
Siemens / SIMATIC PCS neo V4.1	affected 0 before *
Siemens / SIMATIC PCS neo V5.0	affected 0 before *
Siemens / SINEC NMS	affected 0 before V4.0
Siemens / SINEMA Remote Connect	affected 0 before *
Siemens / Totally Integrated Automation Portal (TIA Portal) V17	affected 0 before *
Siemens / Totally Integrated Automation Portal (TIA Portal) V18	affected 0 before *
Siemens / Totally Integrated Automation Portal (TIA Portal) V19	affected 0 before *
Siemens / Totally Integrated Automation Portal (TIA Portal) V20	affected 0 before *
Siemens / User Management Component (UMC)	affected 0 before V2.15.1.1

CWE

CWE-125

References

https://cert-portal.siemens.com/productcert/html/ssa-614723.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.