A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-722410.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Oct 2026, 22:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Se ha identificado una vulnerabilidad en SIMATIC PCS neo V4.1 (Todas las versiones), SIMATIC PCS neo V5.0 (Todas las versiones), SIMATIC PCS neo V6.0 (Todas las versiones), Componente de Gestión de Usuarios (UMC) (Todas las versiones anteriores a V2.15.1.3). Los productos afectados contienen una vulnerabilidad de desbordamiento de búfer basado en pila en el componente UMC integrado. Esto podría permitir a un atacante remoto no autenticado ejecutar código arbitrario o causar una condición de denegación de servicio. |
18 Oct 2026, 21:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
Information
Published : 2025-09-09 09:15
Updated : 2026-10-23 22:10
NVD link : CVE-2025-40795
Mitre link : CVE-2025-40795
CVE.ORG link : CVE-2025-40795
JSON object : View
Products Affected
siemens
- simatic_pcs_neo
- user_management_component
CWE
CWE-121
Stack-based Buffer Overflow