Siemens SIMATIC PCS neo and User Management Component Out-of-Bounds Read Vulnerability Leading to Denial-of-Service

A out-of-bounds read vulnerability has been identified in Siemens SIMATIC PCS neo versions 4.1 and 5.0, as well as in the User Management Component (UMC) versions prior to 2.15.1.3. This vulnerability allows an unauthenticated remote attacker to cause a denial-of-service condition by exploiting the integrated UMC component.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing affected systems to become unresponsive or unavailable.

Remediation

Users are advised to update the User Management Component (UMC) to version 2.15.1.3 or later. For SIMATIC PCS neo, specific update instructions can be found on the Siemens support portal. In non-networked deployments, block TCP ports 4002 and 4004 on machines with UMC installed. If not using the 'RT Server' type of UMC machine, port 4004 can be blocked everywhere without impacting other UMC machine types.