Skip to content
OpenAdvisories
Critical ICSA-25-254-07 4 CVEs

Siemens User Management Component (UMC)

Published Sep 9, 2025 · Updated Jul 7, 2026 · Revision 4

Vendor: Siemens Product: SIMATIC PCS neo V4.1 Product: SIMATIC PCS neo V5.0 Product: SIMATIC PCS neo V6.0 Product: User Management Component (UMC)

Summary

Siemens' User Management Component (UMC) is affected by multiple vulnerabilities that could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.

Siemens has released a new version for User Management Component (UMC) and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 4

Revision history

  1. #4

    CISA Republication update based on Siemens ProductCERT SSA-722410 advisory

  2. #3

    Added fix for SIMATIC PCS neo V6.0

  3. #2

    Added SIMATIC PCS neo V6.0 as affected

  4. #1

    Publication Date

References