Skip to content
OpenAdvisories
High SSA-614723 3 CVEs

SSA-614723: Denial of Service Vulnerabilities in User Management Component (UMC)

Published May 13, 2025 · Updated Oct 14, 2025 · Revision 3

Vendor: Siemens Product: SIMATIC PCS neo V4.1 Product: SIMATIC PCS neo V5.0 Product: SINEC NMS Product: SINEMA Remote Connect Product: Totally Integrated Automation Portal (TIA Portal) V17 Product: Totally Integrated Automation Portal (TIA Portal) V18 Product: Totally Integrated Automation Portal (TIA Portal) V19 Product: Totally Integrated Automation Portal (TIA Portal) V20 Product: User Management Component (UMC)

Summary

Siemens User Management Component (UMC) is affected by three vulnerabilities which could allow an unauthenticated remote attacker to cause a denial of service condition.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 3

Revision history

  1. #3

    Added No fix planned for PCS Neo V5

  2. #2

    Added fix for SINEC NMS V4.0

  3. #1

    Publication Date

References