cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-614723.html CVE-2025-30174
HIGH
Record summary
CVE-2025-30174 has a selected CVSS score of 8.7 (high).
Description
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound read buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated May 13, 2025 · Source: CVE List
Affected products and versions
9| Product | Source | Version range | Status |
|---|---|---|---|
SIMATIC PCS neo V4.1Browse Siemens / SIMATIC PCS neo V4.1Default status: unknown | CVE List | Before * | affected |
SIMATIC PCS neo V5.0Browse Siemens / SIMATIC PCS neo V5.0Default status: unknown | CVE List | Before * | affected |
SINEC NMSBrowse Siemens / SINEC NMSDefault status: unknown | CVE List | Before V4.0 | affected |
SINEMA Remote ConnectBrowse Siemens / SINEMA Remote ConnectDefault status: unknown | CVE List | Before * | affected |
Totally Integrated Automation Portal (TIA Portal) V17Browse Siemens / Totally Integrated Automation Portal (TIA Portal) V17Default status: unknown | CVE List | Before * | affected |
Totally Integrated Automation Portal (TIA Portal) V18Browse Siemens / Totally Integrated Automation Portal (TIA Portal) V18Default status: unknown | CVE List | Before * | affected |
Totally Integrated Automation Portal (TIA Portal) V19Browse Siemens / Totally Integrated Automation Portal (TIA Portal) V19Default status: unknown | CVE List | Before * | affected |
Totally Integrated Automation Portal (TIA Portal) V20Browse Siemens / Totally Integrated Automation Portal (TIA Portal) V20Default status: unknown | CVE List | Before * | affected |
User Management Component (UMC)Browse Siemens / User Management Component (UMC)Default status: unknown | CVE List | Before V2.15.1.1 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-30174