Out of Bound Read Buffer Overflow in Siemens Automation Products

CVE-2025-30174

What is CVE-2025-30174?

An out of bound read buffer overflow vulnerability has been discovered in multiple Siemens automation products, including the SIMATIC PCS neo, SINEC NMS, SINEMA Remote Connect, and various versions of the Totally Integrated Automation Portal. This flaw allows an unauthenticated remote attacker to exploit the weakness in the integrated User Management Component (UMC), potentially leading to a denial of service condition. All affected versions of these products are susceptible, emphasizing the need for prompt updates to secure systems against unauthorized access.

References