Out of Bound Read Buffer Overflow in Siemens Automation Products
CVE-2025-30174

8.7HIGH

Key Information:

Vendor

Siemens
Status
Simatic Pcs Neo V4.1
Simatic Pcs Neo V5.0
Sinec Nms
Sinema Remote Connect
Vendor
CVE Published:
13 May 2025

What is CVE-2025-30174?

An out of bound read buffer overflow vulnerability has been discovered in multiple Siemens automation products, including the SIMATIC PCS neo, SINEC NMS, SINEMA Remote Connect, and various versions of the Totally Integrated Automation Portal. This flaw allows an unauthenticated remote attacker to exploit the weakness in the integrated User Management Component (UMC), potentially leading to a denial of service condition. All affected versions of these products are susceptible, emphasizing the need for prompt updates to secure systems against unauthorized access.

Affected Version(s)

SIMATIC PCS neo V4.1 0

SIMATIC PCS neo V5.0 0

SINEC NMS 0

References

https://cert-portal.siemens.com/productcert/html/ssa-6147...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.