A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
| Software | From | Fixed in |
|---|---|---|
| siemens / simatic_pcs_neo | 4.1 | 4.1.x |
| siemens / simatic_pcs_neo | 5.0 | 5.0.x |
| siemens / user_management_component | - | 2.15.1.3 |