SecuriTricks - CVE-2025-30175

Description

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound write buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.

Product(s) Impacted

Vendor	Product	Versions
Siemens	Simatic Pcs Neo Sinec Nms Sinema Remote Connect Totally Integrated Automation Portal User Management Component	4.1, 5.0 * * 17, 18, 19, 20 <2.15.1.1

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	siemens	simatic_pcs_neo	4.1	/	/	/	/	/	/	/
a	siemens	simatic_pcs_neo	5.0	/	/	/	/	/	/	/
a	siemens	sinec_nms	/	/	/	/	/	/	/	/
a	siemens	sinema_remote_connect	/	/	/	/	/	/	/	/
a	siemens	totally_integrated_automation_portal	17	/	/	/	/	/	/	/
a	siemens	totally_integrated_automation_portal	18	/	/	/	/	/	/	/
a	siemens	totally_integrated_automation_portal	19	/	/	/	/	/	/	/
a	siemens	totally_integrated_automation_portal	20	/	/	/	/	/	/	/
a	siemens	user_management_component	<2.15.1.1	/	/	/	/	/	/	/

References

https://cert-portal.siemens.com/productcert/html/ssa-614723.html

CVSS Score

8.7 / 10

CVSS Data - 4.0

Attack Vector: NETWORK
Attack Complexity: LOW
Attack Requirements: NONE
Privileges Required: NONE
User Interaction: NONE
Scope:
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: HIGH
Exploit Maturity: NOT_DEFINED

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

View Vector String

Timeline

Published: May 13, 2025, 10:15 a.m.
Last Modified: May 13, 2025, 10:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

productcert@siemens.com

CVE-2025-30175