High severity · published May 13, 2025
CVE-2025-30174
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All…
7.5
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound read buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
SIMATIC PCS neo V4.1 · Siemens
0 · source: vendor
SP
SIMATIC PCS neo V5.0 · Siemens
0 · source: vendor
SN
SINEC NMS · Siemens
before V4.0 · source: vendor, NVD
SR
SINEMA Remote Connect · Siemens
0 · source: vendor, NVD
TI
Totally Integrated Automation Portal (TIA Portal) V17 · Siemens
0 · source: vendor
TI
Totally Integrated Automation Portal (TIA Portal) V18 · Siemens
0 · source: vendor
TI
Totally Integrated Automation Portal (TIA Portal) V19 · Siemens
0 · source: vendor
TI
Totally Integrated Automation Portal (TIA Portal) V20 · Siemens
0 · source: vendor
UM
User Management Component (UMC) · Siemens
before V2.15.1.1 · source: vendor
TI
Totally Integrated Automation Portal · Siemens
17; 18; 19; 20 · source: NVD
UM
User Management Component · Siemens
before 2.15.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-30174
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-30174
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-614723.html
More from SIMATIC PCS neo V4.1
9.8
CVE-2025-40795
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User…
9.8
CVE-2025-40566
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1)
9.8
CVE-2024-49775
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions…
9.8
CVE-2024-33698
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1…
8.8
CVE-2024-45386
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update…