Out of Bound Write Vulnerability in Siemens Industrial Automation Products
CVE-2025-30175

8.7HIGH

Key Information:

Vendor

Siemens
Status
Simatic Pcs Neo V4.1
Simatic Pcs Neo V5.0
Sinec Nms
Sinema Remote Connect
Vendor
CVE Published:
13 May 2025

What is CVE-2025-30175?

A vulnerability exists in Siemens industrial automation products that could lead to an out of bound write buffer overflow within the integrated User Management Component. An unauthenticated remote attacker could exploit this vulnerability to trigger a denial of service condition, affecting the availability of the system. This issue is present in multiple versions of SIMATIC products, including various iterations of the TIA Portal and related applications. Users are advised to review their installations and apply necessary patches to mitigate potential risks.

Affected Version(s)

SIMATIC PCS neo V4.1 0

SIMATIC PCS neo V5.0 0

SINEC NMS 0

References

https://cert-portal.siemens.com/productcert/html/ssa-6147...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-30175 : Out of Bound Write Vulnerability in Siemens Industrial Automation Products