[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhbC61JGo-Rrvf44NbkIg7JmXPrE4_Vq7cFd11tf7MUc":3,"g5a-ex:siemens\u002Fsimatic_pcs_neo@*":111,"g5a-family:siemens\u002Fsimatic_pcs_neo":113},{"success":4,"data":5},true,{"product":6,"versions":28,"topVulnerabilitiesByEpss":34,"kevVulnerabilities":89,"seoMetadata":90,"meta":109},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":27},"siemens","simatic_pcs_neo",5,25,0,"2025-09-09",[14,18,20,22,25],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.0",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"3.1",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"4.0",{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},"4.1",7,{"version":26,"cve_count":24,"kev_count":11,"has_kev":17},"5.0","Simatic Pcs Neo by Siemens is a technology product with 5 tracked versions and 25 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[29,30,31,32,33],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},{"version":26,"cve_count":24,"kev_count":11,"has_kev":17},[35,43,50,57,62,68,74,78,81,84],{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":42},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).","2021-03-25",5.9,"v3.1","Medium",0.63542,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":40,"severity":48,"isKev":17,"epssScore":49},"CVE-2021-20093","A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions \u003C 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.","2021-06-16",9.1,"Critical",0.33304,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":40,"severity":55,"isKev":17,"epssScore":56},"CVE-2020-7587","A vulnerability has been identified in Opcenter Execution Discrete (All versions \u003C V3.2), Opcenter Execution Foundation (All versions \u003C V3.2), Opcenter Execution Process (All versions \u003C V3.2), Opcenter Intelligence (All versions \u003C V3.3), Opcenter Quality (All versions \u003C V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions \u003C V2.6), SIMATIC IT Production Suite (All versions \u003C V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions \u003C V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions \u003C V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions \u003C V16 Update 2), SIMOCODE ES V15.1 (All versions \u003C V15.1 Update 4), SIMOCODE ES V16 (All versions \u003C V16 Update 1), Soft Starter ES V15.1 (All versions \u003C V15.1 Update 3), Soft Starter ES V16 (All versions \u003C V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.","2020-07-14",8.2,"High",0.02484,{"cveId":58,"description":59,"publishedDate":53,"cvssScore":60,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":61},"CVE-2020-7588","A vulnerability has been identified in Opcenter Execution Discrete (All versions \u003C V3.2), Opcenter Execution Foundation (All versions \u003C V3.2), Opcenter Execution Process (All versions \u003C V3.2), Opcenter Intelligence (All versions \u003C V3.3), Opcenter Quality (All versions \u003C V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions \u003C V2.6), SIMATIC IT Production Suite (All versions \u003C V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions \u003C V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions \u003C V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions \u003C V16 Update 2), SIMOCODE ES V15.1 (All versions \u003C V15.1 Update 4), SIMOCODE ES V16 (All versions \u003C V16 Update 1), Soft Starter ES V15.1 (All versions \u003C V15.1 Update 3), Soft Starter ES V16 (All versions \u003C V16 Update 1). Sending a specially crafted packet to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself.",5.3,0.02151,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":40,"severity":55,"isKev":17,"epssScore":67},"CVE-2022-27194","A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions \u003C V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888\u002Ftcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.","2022-04-12",7.5,0.01432,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":40,"severity":55,"isKev":17,"epssScore":73},"CVE-2023-46281","A vulnerability has been identified in Opcenter Execution Foundation (All versions \u003C V2407), Opcenter Quality (All versions \u003C V2312), SIMATIC PCS neo (All versions \u003C V4.1), SINEC NMS (All versions \u003C V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions \u003C V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions \u003C V18 Update 3). When accessing the UMC Web-UI from affected products, UMC uses an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.","2023-12-12",8.8,0.0094,{"cveId":75,"description":76,"publishedDate":71,"cvssScore":66,"cvssVersion":40,"severity":55,"isKev":17,"epssScore":77},"CVE-2023-46284","A vulnerability has been identified in Opcenter Execution Foundation (All versions \u003C V2407), Opcenter Quality (All versions \u003C V2312), SIMATIC PCS neo (All versions \u003C V4.1), SINEC NMS (All versions \u003C V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions \u003C V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions \u003C V18 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer when handling specific requests on port 4002\u002Ftcp and 4004\u002Ftcp. This could allow an attacker to crash the application. The corresponding service is auto-restarted after the crash.",0.00905,{"cveId":79,"description":80,"publishedDate":71,"cvssScore":66,"cvssVersion":40,"severity":55,"isKev":17,"epssScore":77},"CVE-2023-46283","A vulnerability has been identified in Opcenter Execution Foundation (All versions \u003C V2407), Opcenter Quality (All versions \u003C V2312), SIMATIC PCS neo (All versions \u003C V4.1), SINEC NMS (All versions \u003C V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions \u003C V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions \u003C V18 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer when handling specific requests on port 4002\u002Ftcp. This could allow an attacker to crash the application. The corresponding service is auto-restarted after the crash.",{"cveId":82,"description":83,"publishedDate":71,"cvssScore":66,"cvssVersion":40,"severity":55,"isKev":17,"epssScore":77},"CVE-2023-46285","A vulnerability has been identified in Opcenter Execution Foundation (All versions \u003C V2407), Opcenter Quality (All versions \u003C V2312), SIMATIC PCS neo (All versions \u003C V4.1), SINEC NMS (All versions \u003C V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions \u003C V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions \u003C V18 Update 3). The affected application contains an improper input validation vulnerability that could allow an attacker to bring the service into a Denial-of-Service state by sending a specifically crafted message to 4004\u002Ftcp. The corresponding service is auto-restarted after the crash is detected by a watchdog.",{"cveId":85,"description":86,"publishedDate":12,"cvssScore":87,"cvssVersion":40,"severity":48,"isKev":17,"epssScore":88},"CVE-2025-40795","A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Management Component (UMC) (All versions \u003C V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.",9.8,0.00696,[],{"title":91,"metaDescription":92,"keywords":93,"structuredData":94},"Simatic Pcs Neo by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic Pcs Neo by Siemens covering 5 versions with 25 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic Pcs Neo vulnerabilities, Simatic Pcs Neo security, Simatic Pcs Neo CVE, Siemens Simatic Pcs Neo, Simatic Pcs Neo threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":95,"@type":96,"name":97,"description":92,"url":98,"manufacturer":99,"applicationCategory":103,"softwareVersion":104,"mainEntity":105},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic Pcs Neo","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_pcs_neo",{"@type":100,"name":101,"url":102},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","5 versions tracked",{"@type":106,"name":107,"description":108,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Simatic Pcs Neo Security Vulnerabilities","Security vulnerabilities affecting Simatic Pcs Neo by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":110,"apiVersion":15},"2026-10-17T21:05:17.804Z",{"rows":112,"total":11,"capped":17,"failed":11},[],[114],{"product":115,"cves":16},"simatic_pcs_neo_firmware"]