Description
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC PCS neo V4.1 | — | — |
| Siemens | SIMATIC PCS neo V5.0 | — | — |
| Siemens | SIMATIC PCS neo V6.0 | < V6.0 SP1 Update 1 | V6.0 SP1 Update 1 |
| Siemens | User Management Component (UMC) | < V2.15.1.3 | V2.15.1.3 |
Advisories 3
- ICSA-25-254-07 Siemens User Management Component (UMC) CISA ICS & IT advisories · Jul 7, 2026
- SSA-722410 SSA-722410: Multiple Vulnerabilities in User Management Component (UMC) Siemens ProductCERT · Jun 9, 2026
- NCSC-2025-0274 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Sep 9, 2025