Siemens User Management Component (UMC)
Siemens User Management Component (UMC) is affected by three vulnerabilities which could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-30176US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All version… | ||||
| CVE-2025-30175US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All version… | ||||
| CVE-2025-30174US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All version… | ||||
references
External citations — patches, advisories, analysis.
- SSA-614723: Denial of Service Vulnerabilities in User Management Component (UMC) - CSAF Versionself
- SSA-614723: Denial of Service Vulnerabilities in User Management Component (UMC) - HTML Versionself
- ICS Advisory ICSA-25-135-09 JSONself
- ICS Advisory ICSA-25-135-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (54)
- MitigationSIMATIC PCS neo V4.1
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSIMATIC PCS neo V4.1
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSIMATIC PCS neo V4.1
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSIMATIC PCS neo V5.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSIMATIC PCS neo V5.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSIMATIC PCS neo V5.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEC NMS
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEC NMS
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEC NMS
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEMA Remote Connect
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEMA Remote Connect
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEMA Remote Connect
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V17
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V17
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V17
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V18
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V18
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V18
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V19
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V19
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V19
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V20
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V20
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V20
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationUser Management Component (UMC)
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationUser Management Component (UMC)
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationUser Management Component (UMC)
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- No fix plannedSIMATIC PCS neo V4.1
Currently no fix is planned
- No fix plannedSIMATIC PCS neo V4.1
Currently no fix is planned
- No fix plannedSIMATIC PCS neo V4.1
Currently no fix is planned
- No fix plannedSIMATIC PCS neo V5.0
Currently no fix is planned
- No fix plannedSIMATIC PCS neo V5.0
Currently no fix is planned
- No fix plannedSIMATIC PCS neo V5.0
Currently no fix is planned
- FixedSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - FixedSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - FixedSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - FixedSINEMA Remote Connect
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedSINEMA Remote Connect
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedSINEMA Remote Connect
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V17
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V17
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V17
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V18
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V18
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V18
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V19
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V19
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V19
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V20
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V20
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V20
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedUser Management Component (UMC)
Update to V2.15.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987708/ - FixedUser Management Component (UMC)
Update to V2.15.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987708/ - FixedUser Management Component (UMC)
Update to V2.15.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987708/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan