Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:simatic_pcs_neo:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic Pcs Neo (81b240b8-e2b8-5f08-a02e-c0d54520e6d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40798 vulnerable 2026-06-08 07:25:05.614566 Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Published: 2025-09-09T08:48:05.138Z
Updated: 2026-06-09T08:46:47.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40797 vulnerable 2026-06-08 07:25:05.613790 Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Published: 2025-09-09T08:48:03.853Z
Updated: 2026-06-09T08:46:46.861Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40796 vulnerable 2026-06-08 07:25:05.613165 Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Published: 2025-09-09T08:48:02.550Z
Updated: 2026-06-09T08:46:45.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40795 vulnerable 2026-06-08 07:25:05.611464 Details available
CRITICAL (9.8)
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.
Published: 2025-09-09T08:48:00.987Z
Updated: 2026-06-09T08:46:44.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30176 vulnerable 2026-06-08 07:16:59.202591 Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound read buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Published: 2025-05-13T09:38:39.738Z
Updated: 2025-07-08T10:34:35.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30175 vulnerable 2026-06-08 07:16:59.200901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33698 vulnerable 2026-06-08 06:37:32.103064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.