A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-722410.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Oct 2026, 22:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Una vulnerabilidad ha sido identificada en SIMATIC PCS neo V4.1 (Todas las versiones), SIMATIC PCS neo V5.0 (Todas las versiones), SIMATIC PCS neo V6.0 (Todas las versiones), Componente de Gestión de Usuarios (UMC) (Todas las versiones anteriores a V2.15.1.3). Los productos afectados contienen una vulnerabilidad de lectura fuera de límites en el componente UMC integrado. Esto podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio. |
18 Oct 2026, 21:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
Information
Published : 2025-09-09 09:15
Updated : 2026-10-23 22:10
NVD link : CVE-2025-40797
Mitre link : CVE-2025-40797
CVE.ORG link : CVE-2025-40797
JSON object : View
Products Affected
siemens
- simatic_pcs_neo
- user_management_component
CWE
CWE-125
Out-of-bounds Read