SSA-722410: Multiple Vulnerabilities in User Management Component (UMC)
Siemens' User Management Component (UMC) is affected by multiple vulnerabilities that could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. Siemens has released a new version for User Management Component (UMC) and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40798US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Manag… | ||||
| CVE-2025-40797US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Manag… | ||||
| CVE-2025-40796US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Manag… | ||||
| CVE-2025-40795US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Manag… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (32)
- MitigationSIMATIC PCS neo V4.1
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V4.1
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V4.1
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V4.1
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V5.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V5.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V5.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V5.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V6.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V6.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V6.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationSIMATIC PCS neo V6.0
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationUser Management Component (UMC)
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationUser Management Component (UMC)
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationUser Management Component (UMC)
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- MitigationUser Management Component (UMC)
In non-networked scenarios/deployments block TCP ports 4002 and 4004 on machines with UMC installed. If the deployment is not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting network functionality for all other UMC machine-types (Server, Ring-Server, Agent).
- Kein Fix geplantSIMATIC PCS neo V4.1
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V4.1
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V4.1
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V4.1
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V5.0
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V5.0
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V5.0
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS neo V5.0
Currently no fix is planned
- BehobenSIMATIC PCS neo V6.0
Update to V6.0 SP1 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110000357/ - BehobenSIMATIC PCS neo V6.0
Update to V6.0 SP1 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110000357/ - BehobenSIMATIC PCS neo V6.0
Update to V6.0 SP1 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110000357/ - BehobenSIMATIC PCS neo V6.0
Update to V6.0 SP1 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110000357/ - BehobenUser Management Component (UMC)
Update to V2.15.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109991261/ - BehobenUser Management Component (UMC)
Update to V2.15.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109991261/ - BehobenUser Management Component (UMC)
Update to V2.15.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109991261/ - BehobenUser Management Component (UMC)
Update to V2.15.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109991261/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan