Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:simatic_pcs_neo_v4.1:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic Pcs Neo V4.1 (d609e659-d618-5223-b1bf-b9d151441747)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40798 vulnerable 2026-06-08 07:25:05.614210 Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Published: 2025-09-09T08:48:05.138Z
Updated: 2026-06-09T08:46:47.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40797 vulnerable 2026-06-08 07:25:05.613481 Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Published: 2025-09-09T08:48:03.853Z
Updated: 2026-06-09T08:46:46.861Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40796 vulnerable 2026-06-08 07:25:05.612724 Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Published: 2025-09-09T08:48:02.550Z
Updated: 2026-06-09T08:46:45.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40795 vulnerable 2026-06-08 07:25:05.599878 Details available
CRITICAL (9.8)
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.
Published: 2025-09-09T08:48:00.987Z
Updated: 2026-06-09T08:46:44.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40566 vulnerable 2026-06-08 07:25:04.977675 Details available
HIGH (8.8)
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.
Published: 2025-05-13T09:38:52.993Z
Updated: 2025-05-13T18:47:35.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30176 vulnerable 2026-06-08 07:16:59.201852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30175 vulnerable 2026-06-08 07:16:59.189943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30174 vulnerable 2026-06-08 07:16:59.178893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54678 vulnerable 2026-06-08 06:54:16.754325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49775 vulnerable 2026-06-08 06:50:14.666950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45386 vulnerable 2026-06-08 06:48:06.012894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33698 vulnerable 2026-06-08 06:37:32.108325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.