Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Siemens | SIMATIC PCS neo V4.1 | unknown |
|
||||||
| Siemens | SIMATIC PCS neo V5.0 | unknown |
|
||||||
| Siemens | SIMATIC PCS neo V6.0 | unknown |
|
||||||
| Siemens | User Management Component (UMC) | unknown |
|
Configuration 1 [-]
|
No data.
| Vendor | Product | Confidence | Versions |
|---|---|---|---|
| Siemens | Simatic | — | — |
| Siemens | Simatic Pcs Neo | — | — |
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-27240 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. |
Tue, 14 Oct 2025 09:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. |
Fri, 03 Oct 2025 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Siemens user Management Component
|
|
| CPEs | cpe:2.3:a:siemens:simatic_pcs_neo:4.1:*:*:*:*:*:*:* cpe:2.3:a:siemens:simatic_pcs_neo:5.0:*:*:*:*:*:*:* cpe:2.3:a:siemens:user_management_component:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Siemens user Management Component
|
Tue, 09 Sep 2025 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 09 Sep 2025 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Siemens
Siemens simatic Siemens simatic Pcs Neo |
|
| Vendors & Products |
Siemens
Siemens simatic Siemens simatic Pcs Neo |
Tue, 09 Sep 2025 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. | |
| Weaknesses | CWE-121 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: siemens
Published:
Updated: 2025-10-14T09:15:22.312Z
Reserved: 2025-04-16T08:50:26.972Z
Link: CVE-2025-40795
Vulnrichment
Updated: 2025-09-09T19:35:13.291Z
NVD
Status : Modified
Published: 2025-09-09T09:15:37.343
Modified: 2025-10-14T10:15:39.027
Link: CVE-2025-40795
Redhat
No data.
OpenCVE Enrichment
Updated: 2025-09-09T21:31:34Z