Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-40797

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.

Published

2025-09-09T09:15:37.900

Last Modified

2025-10-14T10:15:39.317

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application siemens simatic_pcs_neo 4.1 Yes
Application siemens simatic_pcs_neo 5.0 Yes
Application siemens user_management_component < 2.15.1.3 Yes
References