CVE-2026-24032

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3 with UMC. The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain...

CVE-2026-24032

CVE-2026-24032 affects SINEC NMS prior to version 4.0 SP3 with UMC. The issue is an authentication weakness caused by insufficient validation of user identity in the UMC component, enabling an unauthenticated remote attacker to bypass authentication and gain unauthorized access. Documents do not ...

EUVD-2026-22233

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3 with UMC. The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain...

EUVD-2020-17929

Malware in sbrugna...

EUVD-2023-52482

Malicious code in bioql PyPI...

EUVD-2023-35666

Malicious code in bioql PyPI...

EUVD-2024-43871

Malicious code in bioql PyPI...

EUVD-2023-52478

Malicious code in bioql PyPI...

CVE-2025-40798

CVE-2025-40798 affects Siemens SIMATIC PCS neo versions 4.1, 5.0, 6.0 (all versions) and the embedded User Management Component (UMC) versions prior to 2.15.1.3. The vulnerability is an out-of-bounds read in the UMC that could allow an unauthenticated remote attacker to cause a denial of service....

CVE-2025-40796

The CVE-2025-40796 entry affects Siemens SIMATIC PCS neo (V4.1, V5.0, V6.0 all versions) and the User Management Component (UMC) (all versions

Siemens User Management Component (UMC)

SUMMARY Siemens' User Management Component UMC is affected by multiple vulnerabilities that could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. Siemens has released a new version for User Management Component UMC and recommends to...

PT-2025-36683

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions 4.1 All versions SIMATIC PCS neo versions 5.0 All versions User Management Component UMC versions prior to 2.15.1.3 Description: The software contains an out-of-bounds read issue in the integrated User Management...

CVE-2025-30174

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

CVE-2025-30176

Summary (CVE-2025-30176) Affected Siemens products include SIMATIC PCS neo (V4.1–V5.0), SINEC NMS (< V4.0), SINEMA Remote Connect, TIA Portal (V17–V20), and the User Management Component (UMC) (

CVE-2025-30175

CVE-2025-30175 affects Siemens SIMATIC PCS neo (V4.1–V5.0), SINEC NMS (

CVE-2025-30174

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

Siemens多款产品 缓冲区错误漏洞

Siemens SINEMA Remote Connect and others are products of Siemens, Germany.Siemens SINEMA Remote Connect is a set of remote management platforms.Siemens SINEC NMS is a network management system NMS.Siemens SIMATIC PCS is a process control system. A buffer error vulnerability exists in several...

SUSE CVE-2023-31355

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest...

SUSE CVE-2024-21980

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity...

CVE-2023-31355

A flaw was found in the AMD firmware. This vulnerability allows a malicious hypervisor to overwrite a guest's UMC seed, potentially enabling the reading of memory from a decommissioned guest via improper restriction of write operations. Mitigation Mitigation for this issue is either not available...