Login Sign Up

CVE-2025-30174

7.5 HIGH
Denial of Service Buffer Overflow

📋 TL;DR

An out-of-bounds read buffer overflow vulnerability in Siemens industrial automation products allows unauthenticated remote attackers to cause denial of service. Affected systems include SIMATIC PCS neo, SINEC NMS, SINEMA Remote Connect, TIA Portal, and User Management Component. This vulnerability affects critical industrial control systems used in manufacturing and infrastructure.

💻 Affected Systems

Products:
  • SIMATIC PCS neo V4.1
  • SIMATIC PCS neo V5.0
  • SINEC NMS
  • SINEMA Remote Connect
  • Totally Integrated Automation Portal (TIA Portal) V17
  • Totally Integrated Automation Portal (TIA Portal) V18
  • Totally Integrated Automation Portal (TIA Portal) V19
  • Totally Integrated Automation Portal (TIA Portal) V20
  • User Management Component (UMC)
Versions: All versions of listed products except SINEC NMS < V4.0 and UMC < V2.15.1.1
Operating Systems: Windows-based industrial control systems
Default Config Vulnerable: ⚠️ Yes
Notes: Affects the integrated UMC component across multiple Siemens industrial automation products.

📦 What is this software?

Sinec Nms by Siemens

View all CVEs affecting Sinec Nms →

Sinema Remote Connect by Siemens

View all CVEs affecting Sinema Remote Connect →

Totally Integrated Automation Portal by Siemens

View all CVEs affecting Totally Integrated Automation Portal →

Totally Integrated Automation Portal by Siemens

View all CVEs affecting Totally Integrated Automation Portal →

Totally Integrated Automation Portal by Siemens

View all CVEs affecting Totally Integrated Automation Portal →

Totally Integrated Automation Portal by Siemens

View all CVEs affecting Totally Integrated Automation Portal →

User Management Component by Siemens

View all CVEs affecting User Management Component →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system crash leading to production downtime in industrial environments, potentially affecting physical processes and safety systems.

🟠

Likely Case

Service disruption affecting automation controllers and engineering workstations, halting industrial operations until systems are restarted.

🟢

If Mitigated

Limited impact with proper network segmentation and access controls preventing remote exploitation attempts.

🌐 Internet-Facing: HIGH - Unauthenticated remote exploitation allows attackers to target exposed systems without credentials.
🏢 Internal Only: MEDIUM - Internal attackers could exploit this, but network segmentation reduces attack surface.

🎯 Exploit Status

Public PoC: ✅ No
Weaponized: UNKNOWN
Unauthenticated Exploit: ⚠️ Yes
Complexity: LOW

CWE-125 vulnerabilities typically require less sophisticated exploitation techniques compared to arbitrary code execution vulnerabilities.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: SINEC NMS V4.0, UMC V2.15.1.1, and updates for other affected products as per Siemens advisory

Vendor Advisory: https://cert-portal.siemens.com/productcert/html/ssa-614723.html

Restart Required: Yes

Instructions:

1. Review Siemens advisory SSA-614723. 2. Download appropriate patches from Siemens support portal. 3. Apply patches during maintenance windows. 4. Restart affected systems. 5. Verify patch installation.

🔧 Temporary Workarounds

Network Segmentation

all

Isolate affected systems from untrusted networks using firewalls and VLANs

Access Control Lists

all

Implement strict network access controls to limit connections to affected systems

🧯 If You Can't Patch

  • Implement network segmentation to isolate affected systems from untrusted networks
  • Deploy intrusion detection systems to monitor for exploitation attempts

🔍 How to Verify

Check if Vulnerable:

Check product versions against affected list in Siemens advisory SSA-614723

Check Version:

Product-specific commands vary; consult Siemens documentation for each product

Verify Fix Applied:

Verify installed version meets or exceeds patched versions specified in advisory

📡 Detection & Monitoring

Log Indicators:

  • System crashes
  • Service restarts
  • Memory access violations in application logs

Network Indicators:

  • Unusual traffic patterns to UMC components
  • Connection attempts from unexpected sources

SIEM Query:

search for 'UMC crash' OR 'buffer overflow' OR 'access violation' in industrial control system logs

📊 Metadata

CVE ID: CVE-2025-30174
CVSS v3 Score: 7.5 (HIGH)
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE: CWE-125
EPSS Score: 0.1% exploit probability (27th percentile)
Published: May 13, 2025
Last Updated: October 3, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2025-30174, you might also want to check these:

CVE-2021-41556 10.0

CVE-2021-41556 is a critical out-of-bounds read vulnerability in Squirrel scripting language that al...

Same vulnerability type (CWE-125)
CVE-2024-22004 10.0

This vulnerability allows attackers with privileged access on Linux non-secure operating systems to ...

Same vulnerability type (CWE-125)
CVE-2021-21777 10.0

CVE-2021-21777 is a critical out-of-bounds read vulnerability in the Ethernet/IP UDP handler of OpEN...

Same vulnerability type (CWE-125)