Vulnerability Details CVE-2025-40795
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.8%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2025-40795
-
cpe:2.3:a:siemens:simatic_pcs_neo:4.1
-
cpe:2.3:a:siemens:simatic_pcs_neo:5.0
-
cpe:2.3:a:siemens:user_management_component:*