Siemens User Management Component vulnerabilities

8 CVEs affecting Siemens User Management Component, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-25656, published 2026-02-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-40795, published 2025-09-09. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component…
CVE-2025-30176, published 2025-05-13. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally…
CVE-2025-30175, published 2025-05-13. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally…
CVE-2025-30174, published 2025-05-13. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally…
CVE-2025-40798, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component…
CVE-2025-40797, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component…
CVE-2025-40796, published 2025-09-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component…
CVE-2026-25656, published 2026-02-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a…