SIMATIC PCS neo V5.0 vulnerabilities

12 known vulnerabilities in SIMATIC PCS neo V5.0 from Siemens. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

12vulnerabilities

4critical

8high

0exploited

8.4average CVSS score

Latest first

7.5 High severity
SIMATIC PCS neo V4.1: Out-of-bounds Read
CVE-2025-40798Sep 9, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a ou
7.5 High severity
SIMATIC PCS neo V4.1: Out-of-bounds Read
CVE-2025-40797Sep 9, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a ou
7.5 High severity
SIMATIC PCS neo V4.1: Out-of-bounds Read
CVE-2025-40796Sep 9, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a ou
9.8 Critical severity
SIMATIC PCS neo V4.1: Stack-based Buffer Overflow
CVE-2025-40795Sep 9, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a st
8.2 High severity
SIMATIC PCS neo V4.1: Deserialization of Untrusted Data
CVE-2024-54678Aug 12, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SI
9.8 Critical severity
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3)…
CVE-2025-40566May 13, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthentic
7.5 High severity
SIMATIC PCS neo V4.1: Out-of-bounds Read
CVE-2025-30176May 13, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totall
7.5 High severity
SIMATIC PCS neo V4.1: Out-of-bounds Write
CVE-2025-30175May 13, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totall
7.5 High severity
SIMATIC PCS neo V4.1: Out-of-bounds Read
CVE-2025-30174May 13, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totall
8.8 High severity
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo…
CVE-2024-45386Feb 11, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SIMOCODE ES V19 (All versions < V19 Update 1), SIRIUS Safety ES V19 (TIA Porta
9.8 Critical severity
Opcenter Execution Foundation: Heap-based Buffer Overflow
CVE-2024-49775Dec 16, 2024SiemensEPSS 1.51%
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions < V2512), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versio
9.8 Critical severity
Opcenter Quality: Heap-based Buffer Overflow
CVE-2024-33698Sep 10, 2024SiemensEPSS 1.06%
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1),