Skip to content
OpenAdvisories
Critical SSA-722410 4 CVEs

SSA-722410: Multiple Vulnerabilities in User Management Component (UMC)

Published Sep 9, 2025 · Updated Jun 9, 2026 · Revision 3

Vendor: Siemens Product: SIMATIC PCS neo V4.1 Product: SIMATIC PCS neo V5.0 Product: SIMATIC PCS neo V6.0 Product: User Management Component (UMC)

Summary

Siemens' User Management Component (UMC) is affected by multiple vulnerabilities that could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.

Siemens has released a new version for User Management Component (UMC) and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 4

Revision history

  1. #3

    Added fix for SIMATIC PCS neo V6.0

  2. #2

    Added SIMATIC PCS neo V6.0 as affected

  3. #1

    Publication Date

References