CVE-2025-30175

Опубликовано: 13 мая 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound write buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.

Ссылки

https://cert-portal.siemens.com/productcert/html/ssa-614723.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:siemens:simatic_pcs_neo:4.1:*:*:*:*:*:*:*

cpe:2.3:a:siemens:simatic_pcs_neo:5.0:*:*:*:*:*:*:*

cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*

Версия до 4.0 (исключая)

cpe:2.3:a:siemens:sinema_remote_connect:-:*:*:*:*:*:*:*

cpe:2.3:a:siemens:totally_integrated_automation_portal:17:*:*:*:*:*:*:*

cpe:2.3:a:siemens:totally_integrated_automation_portal:18:*:*:*:*:*:*:*

cpe:2.3:a:siemens:totally_integrated_automation_portal:19:*:*:*:*:*:*:*

cpe:2.3:a:siemens:totally_integrated_automation_portal:20:*:*:*:*:*:*:*

cpe:2.3:a:siemens:user_management_component:*:*:*:*:*:*:*:*

Версия до 2.15.1.1 (исключая)

EPSS

Процентиль: 27%

0.00097

Низкий

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-p7rr-mpvr-c5pf

CVSS3: 7.5

github

9 месяцев назад

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound write buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.

BDU:2025-06601

CVSS3: 7.5

fstec

9 месяцев назад

Уязвимость компонента Siemens User Management Component (UMC) продуктов SIMATIC PCS neo, SINEC NMS, Totally Integrated Automation Portal (TIA Portal), позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 27%

0.00097

Низкий

7.5 High

CVSS3

Дефекты

CWE-787