User Management Component (UMC) vulnerabilities

8 known vulnerabilities in User Management Component (UMC) from Siemens. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  SINEC NMS: Uncontrolled Search Path Element

  CVE-2026-25656Feb 10, 2026Siemens

  A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an

• 7.5 High severity

  SIMATIC PCS neo V4.1: Out-of-bounds Read

  CVE-2025-40798Sep 9, 2025Siemens

  A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a ou

• 7.5 High severity

  SIMATIC PCS neo V4.1: Out-of-bounds Read

  CVE-2025-40797Sep 9, 2025Siemens

  A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a ou

• 7.5 High severity

  SIMATIC PCS neo V4.1: Out-of-bounds Read

  CVE-2025-40796Sep 9, 2025Siemens

  A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a ou

• 9.8 Critical severity

  SIMATIC PCS neo V4.1: Stack-based Buffer Overflow

  CVE-2025-40795Sep 9, 2025Siemens

  A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a st

• 7.5 High severity

  SIMATIC PCS neo V4.1: Out-of-bounds Read

  CVE-2025-30176May 13, 2025Siemens

  A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totall

• 7.5 High severity

  SIMATIC PCS neo V4.1: Out-of-bounds Write

  CVE-2025-30175May 13, 2025Siemens

  A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totall

• 7.5 High severity

  SIMATIC PCS neo V4.1: Out-of-bounds Read

  CVE-2025-30174May 13, 2025Siemens

  A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totall