A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound read buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-614723.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
03 Oct 2025, 19:52
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:siemens:totally_integrated_automation_portal:19:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:20:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:17:*:*:*:*:*:*:* cpe:2.3:a:siemens:user_management_component:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:18:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinema_remote_connect:-:*:*:*:*:*:*:* |
|
| First Time |
Siemens user Management Component
Siemens sinec Nms Siemens Siemens totally Integrated Automation Portal Siemens sinema Remote Connect |
|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-614723.html - Vendor Advisory |
08 Jul 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-13 10:15
Updated : 2025-10-03 19:52
NVD link : CVE-2025-30174
Mitre link : CVE-2025-30174
CVE.ORG link : CVE-2025-30174
JSON object : View
Products Affected
siemens
- sinec_nms
- sinema_remote_connect
- user_management_component
- totally_integrated_automation_portal
CWE
CWE-125
Out-of-bounds Read