[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBXOa1ks9DXaK7rs9vNL35Rvj-ZruawKiLi6yIAyhu2U":3,"g5a-risk:CVE-2025-40796":116},{"success":4,"data":5,"meta":113},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":47,"references":48,"referencesCount":54,"weaknesses":55,"weaknessesCount":54,"isActivelyExploited":64,"cisaInfo":26,"otxData":26,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":104,"notableEvents":105},"CVE-2025-40796","What is CVE-2025-40796?","A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Management Component (UMC) (All versions \u003C V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.","A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions), User Ma...","2025-09-09T09:15:37.65","2025-10-14T10:15:39.187",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"productcert@siemens.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[],[],0.00479,[31,31,31,31,31,31,31],"High",[35,40,43],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"siemens","simatic_pcs_neo","4.1","cpe:2.3:a:siemens:simatic_pcs_neo:4.1:*:*:*:*:*:*:*",{"vendor":36,"product":37,"version":41,"criteria":42,"vulnerable":4},"5.0","cpe:2.3:a:siemens:simatic_pcs_neo:5.0:*:*:*:*:*:*:*",{"vendor":36,"product":44,"version":45,"criteria":46,"vulnerable":4},"user_management_component","*","cpe:2.3:a:siemens:user_management_component:*:*:*:*:*:*:*:*",3,[49],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-722410.html","Siemens",[53],"Vendor Advisory",1,[56],{"id":57,"name":58,"description":59,"extendedDescription":60,"status":61,"abstraction":62,"structure":63},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2025-40796? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-40796, a high severity cyber security vulnerability from 2025. A vulnerability has been identified in SIMATIC PCS neo V4.1...","CVE-2025-40796, CVE-2025-40796 vulnerability, CVE-2025-40796 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, siemens security, simatic_pcs_neo vulnerability, user_management_component vulnerability","\u002Fwhat-is\u002Fcve-2025-40796",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":10,"dateModified":11,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-40796","Cybersecurity","CVE-2025-40796, CVE-2025-40796 vulnerability, CVE-2025-40796 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92],{"Operator":26,"Negate":26,"Nodes":93},[94],{"Operator":95,"Negate":64,"CPEMatch":96},"OR",[97,99,101],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":98,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3F0A4753-2049-4462-BE3C-78E60548E144",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":100,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"03D9BFA4-6205-483C-A3C9-AB708BF2FDDA",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":102,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":103,"VersionEndIncluding":26},"5E8A8395-D7FF-4C89-8BCC-9B3B4BF72A92","2.15.1.3",[],[106],{"id":107,"eventType":108,"eventTime":109,"details":110,"label":111,"color":112},"18a746cc-e9e4-48f6-8500-1c100a6897fa","NEW_NVD","2025-09-10T04:01:01.78598+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":114,"version":115},1792375405384,"2.0",{"score":117,"band":118,"action":119,"scoredAt":120},47,"Medium","Plan remediation","2026-10-16T07:08:46.482338+00:00"]