VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 9, 2025· Updated Oct 14, 2025

CVE-2025-40795

CVE-2025-40795

Description

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.

Affected products

5
  • Siemens Foundation/User Management Componentllm-fuzzy
    Range: < V2.15.1.3
  • Siemens/SIMATIC PCS neo V4.1v5
    Range: 0
  • Siemens/SIMATIC PCS neo V5.0v5
    Range: 0
  • Siemens/SIMATIC PCS neo V6.0v5
    Range: 0
  • Siemens/User Management Component (UMC)v5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.