SSA-614723: Denial of Service Vulnerabilities in User Management Component (UMC)
Siemens User Management Component (UMC) is affected by three vulnerabilities which could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-30176US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All version… | ||||
| CVE-2025-30175US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All version… | ||||
| CVE-2025-30174US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All version… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (54)
- MitigationSIMATIC PCS neo V4.1
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSIMATIC PCS neo V4.1
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSIMATIC PCS neo V4.1
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSIMATIC PCS neo V5.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSIMATIC PCS neo V5.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSIMATIC PCS neo V5.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEC NMS
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEC NMS
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEC NMS
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEMA Remote Connect
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEMA Remote Connect
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationSINEMA Remote Connect
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V17
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V17
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V17
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V18
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V18
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V18
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V19
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V19
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V19
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V20
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V20
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationTotally Integrated Automation Portal (TIA Portal) V20
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationUser Management Component (UMC)
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationUser Management Component (UMC)
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- MitigationUser Management Component (UMC)
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. In addition if no RT server machines are used, port 4004 can be blocked completely
- Kein Fix geplantSIMATIC PCS neo V4.1
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V4.1
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V4.1
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V5.0
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V5.0
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V5.0
Currently no fix is planned
- BehobenSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - BehobenSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - BehobenSINEC NMS
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989514/ - BehobenSINEMA Remote Connect
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenSINEMA Remote Connect
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenSINEMA Remote Connect
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V17
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V17
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V17
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V18
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V18
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V18
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V19
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V19
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V19
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V20
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V20
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V20
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenUser Management Component (UMC)
Update to V2.15.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987708/ - BehobenUser Management Component (UMC)
Update to V2.15.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987708/ - BehobenUser Management Component (UMC)
Update to V2.15.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987708/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan