A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound write buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-614723.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
03 Oct 2025, 19:52
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens user Management Component
Siemens sinec Nms Siemens Siemens totally Integrated Automation Portal Siemens sinema Remote Connect Siemens simatic Pcs Neo |
|
| CPE | cpe:2.3:a:siemens:totally_integrated_automation_portal:20:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinema_remote_connect:-:*:*:*:*:*:*:* cpe:2.3:a:siemens:simatic_pcs_neo:5.0:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:19:*:*:*:*:*:*:* cpe:2.3:a:siemens:simatic_pcs_neo:4.1:*:*:*:*:*:*:* cpe:2.3:a:siemens:user_management_component:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:18:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:17:*:*:*:*:*:*:* |
|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-614723.html - Vendor Advisory |
08 Jul 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-13 10:15
Updated : 2025-10-03 19:52
NVD link : CVE-2025-30175
Mitre link : CVE-2025-30175
CVE.ORG link : CVE-2025-30175
JSON object : View
Products Affected
siemens
- sinec_nms
- totally_integrated_automation_portal
- simatic_pcs_neo
- sinema_remote_connect
- user_management_component
CWE
CWE-787
Out-of-bounds Write