CVE-2025-40797
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-09-09
Last updated on: 2025-10-14
Assigner: Siemens AG
Description
Description
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| siemens | simatic_pcs_neo | 4.1 |
| siemens | simatic_pcs_neo | 5.0 |
| siemens | user_management_component | to 2.15.1.3 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out-of-bounds read issue in the User Management Component (UMC) integrated into SIMATIC PCS neo versions 4.1 and 5.0. It allows an unauthenticated remote attacker to cause a denial of service (DoS) condition by exploiting this flaw.
How can this vulnerability impact me? :
The vulnerability can be exploited remotely without authentication to cause a denial of service, potentially disrupting the availability of the affected SIMATIC PCS neo systems.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70