Out-of-bounds Read in Siemens Simatic Pcs Neo
CVE-2025-30176
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound read buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Vulnerability class: Buffer Overflow
EPSS: 0.006 (47.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Siemens Simatic_pcs_neo — versions 4.1, 5.0
- Siemens Simatic Pcs Neo V4.1 — versions 0
- Siemens Simatic Pcs Neo V5.0 — versions 0
- Siemens Sinec Nms — versions 0
- Siemens Sinec_nms
- Siemens Sinema Remote Connect — versions 0
- Siemens Sinema_remote_connect
- Siemens Totally_integrated_automation_portal — versions 17, 18, 19
- Siemens Totally Integrated Automation Portal (Tia Portal) V17 — versions 0
- Siemens Totally Integrated Automation Portal (Tia Portal) V18 — versions 0
Weakness classification (CWE)
References
- productcert@siemens.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-30176?
- CVE-2025-30176 is a high-severity vulnerability in Siemens Simatic Pcs Neo, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2025-05-13.
- How severe is CVE-2025-30176?
- High severity. CVSS v3 base score is 7.5 out of 10.