Sign-up

ID

VAR-202509-0307


CVE

CVE-2025-40795


TITLE

Siemens'  SIMATIC PCS neo  and  User Management Component (UMC)  Stack-based buffer overflow vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2025-015794

DESCRIPTION

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. Siemens' SIMATIC PCS neo and User Management Component (UMC) Exists in a stack-based buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2025-40795 // JVNDB: JVNDB-2025-015794

AFFECTED PRODUCTS

vendor:siemensmodel:simatic pcs neoscope:eqversion:4.1

Trust: 1.0

vendor:siemensmodel:user management componentscope:ltversion:2.15.1.3

Trust: 1.0

vendor:siemensmodel:simatic pcs neoscope:eqversion:5.0

Trust: 1.0

vendor:シーメンスmodel:simatic pcs neoscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:user management componentscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2025-015794 // NVD: CVE-2025-40795

CVSS

SEVERITY

CVSSV2

CVSSV3

productcert@siemens.com: CVE-2025-40795
value: CRITICAL

Trust: 1.0

OTHER: JVNDB-2025-015794
value: CRITICAL

Trust: 0.8

productcert@siemens.com: CVE-2025-40795
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 1.0

OTHER: JVNDB-2025-015794
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2025-015794 // NVD: CVE-2025-40795

PROBLEMTYPE DATA

problemtype:CWE-121

Trust: 1.0

problemtype:Stack-based buffer overflow (CWE-121) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-015794 // NVD: CVE-2025-40795

EXTERNAL IDS

db:NVDid:CVE-2025-40795

Trust: 2.6

db:SIEMENSid:SSA-722410

Trust: 1.8

db:JVNid:JVNVU95775509

Trust: 0.8

db:ICS CERTid:ICSA-25-254-07

Trust: 0.8

db:JVNDBid:JVNDB-2025-015794

Trust: 0.8

sources: JVNDB: JVNDB-2025-015794 // NVD: CVE-2025-40795

REFERENCES

url:https://cert-portal.siemens.com/productcert/html/ssa-722410.html

Trust: 1.8

url:https://jvn.jp/vu/jvnvu95775509/

Trust: 0.8

url:https://nvd.nist.gov/vuln/detail/cve-2025-40795

Trust: 0.8

url:https://www.cisa.gov/news-events/ics-advisories/icsa-25-254-07

Trust: 0.8

sources: JVNDB: JVNDB-2025-015794 // NVD: CVE-2025-40795

SOURCES

db:JVNDBid:JVNDB-2025-015794
db:NVDid:CVE-2025-40795

LAST UPDATE DATE

2025-10-14T23:12:22.036000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2025-015794date:2025-10-10T08:40:00
db:NVDid:CVE-2025-40795date:2025-10-14T10:15:39.027

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2025-015794date:2025-10-10T00:00:00
db:NVDid:CVE-2025-40795date:2025-09-09T09:15:37.343