[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV1gs3dROqbw5wJ54Q5-hMYDrx1YeJxeyMQsPjoq7jsw":3,"g5a-risk:CVE-2025-40795":117},{"success":4,"data":5,"meta":114},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":48,"references":49,"referencesCount":55,"weaknesses":56,"weaknessesCount":55,"isActivelyExploited":65,"cisaInfo":27,"otxData":27,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":105,"notableEvents":106},"CVE-2025-40795","What is CVE-2025-40795?","A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Management Component (UMC) (All versions \u003C V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.","A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Ma...","2025-09-09T09:15:37.343","2025-10-14T10:15:39.027",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"productcert@siemens.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[],0.00696,[32,32,32,32,32,32,32],"Critical",[36,41,44],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"siemens","simatic_pcs_neo","4.1","cpe:2.3:a:siemens:simatic_pcs_neo:4.1:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":42,"criteria":43,"vulnerable":4},"5.0","cpe:2.3:a:siemens:simatic_pcs_neo:5.0:*:*:*:*:*:*:*",{"vendor":37,"product":45,"version":46,"criteria":47,"vulnerable":4},"user_management_component","*","cpe:2.3:a:siemens:user_management_component:*:*:*:*:*:*:*:*",3,[50],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-722410.html","Siemens",[54],"Vendor Advisory",1,[57],{"id":58,"name":59,"description":60,"extendedDescription":61,"status":62,"abstraction":63,"structure":64},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","","Draft","Variant","Simple",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2025-40795? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-40795, a critical severity cyber security vulnerability from 2025. A vulnerability has been identified in SIMATIC PCS neo ...","CVE-2025-40795, CVE-2025-40795 vulnerability, CVE-2025-40795 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, siemens security, simatic_pcs_neo vulnerability, user_management_component vulnerability","\u002Fwhat-is\u002Fcve-2025-40795",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-40795","Cybersecurity","CVE-2025-40795, CVE-2025-40795 vulnerability, CVE-2025-40795 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":27,"Negate":27,"Nodes":94},[95],{"Operator":96,"Negate":65,"CPEMatch":97},"OR",[98,100,102],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":99,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3F0A4753-2049-4462-BE3C-78E60548E144",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":101,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"03D9BFA4-6205-483C-A3C9-AB708BF2FDDA",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":103,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":104,"VersionEndIncluding":27},"5E8A8395-D7FF-4C89-8BCC-9B3B4BF72A92","2.15.1.3",[],[107],{"id":108,"eventType":109,"eventTime":110,"details":111,"label":112,"color":113},"1ffc30a4-0149-4e7c-8bb4-1c0d2140e83f","NEW_NVD","2025-09-10T04:01:01.78598+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":115,"version":116},1792368106813,"2.0",{"score":118,"band":119,"action":120,"scoredAt":121},55,"Medium","Plan remediation","2026-10-16T07:08:46.482009+00:00"]