Siemens Products User Management Component Out-of-Bounds Read Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in the integrated User Management Component (UMC) of several Siemens products, including SIMATIC PCS neo, SINEC NMS versions prior to 4.0, SINEMA Remote Connect, and various versions of the Totally Integrated Automation Portal (TIA Portal). The vulnerability arises from an out-of-bounds read buffer overflow, which could allow an unauthenticated remote attacker to cause a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing affected systems to become unresponsive or unavailable.

Remediation

Users can update to version 2.15.1.1 or later. For SINEC NMS, update to version 4.0 or later. In non-networked scenarios, block TCP ports 4002 and 4004 on machines with UMC installed. If no RT server machines are used, port 4004 can be blocked completely.