Siemens UMC DoS Vulnerabilities (CVE-2025-30174/5/6) Security Advisory

Key Information Vulnerability Overview Vulnerability ID: SSA-614723 Title: Denial of Service Vulnerabilities in User Management Component (UMC) Release Date: 2025-05-13 CVSS Score: - CVSS v3.1 Base Score: 7.5 - CVSS v4.0 Base Score: 8.7 Affected Products and Solutions Affected Products and Versions: - SIMATIC PCS neo - SINEC NMS (all versions) - SINEMA Remote Connect (all versions) - Totally Integrated Automation Portal (TIA Portal) - User Management Component (UMC) (all versions < V2.15.1.1) Mitigation: - Upgrade UMC to version V2.15.1.1 or higher compatible version - Refer to the relevant section in the documentation for specific update links Workarounds and Mitigations CVE IDs: CVE-2025-30174, CVE-2025-30175, CVE-2025-30176 Description: In non-networked scenarios/deployments, block TCP ports 4902 and 4004 on machines where UMC is installed. If RT server machines are not in use, port 4004 can be blocked entirely. Vulnerability Description CVE-2025-30174: Out-of-bounds read buffer overflow vulnerability in the integrated UMC component, potentially allowing remote attackers to cause a denial of service. CVE-2025-30175: Out-of-bounds write buffer overflow vulnerability in the integrated UMC component, potentially allowing remote attackers to cause a denial of service. CVE-2025-30176: Out-of-bounds read buffer overflow vulnerability in the integrated UMC component, potentially allowing remote attackers to cause a denial of service. Additional Information Acknowledgments: Thank you to Tenable for their efforts in coordinated disclosure. Additional Information: For further inquiries regarding security vulnerabilities in Siemens products and solutions, please contact Siemens ProductCERT.

Goal Reached Thanks to every supporter — we hit 100%!

Siemens UMC DoS Vulnerabilities (CVE-2025-30174/5/6) Security Advisory