CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,253 CVEs published, 242 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,253
Show in the list
Critical, last 7 days
242
Show in the list
Healthcare-tagged, last 7 days
6
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product siemens:simatic_pcs_neo_v6.0. Show all products

Free: a daily email for up to 3 products and the weekly digest. No card, no password. By continuing you agree to the Terms and Privacy Policy.

7 CVEs
Showing 1 to 7.
CVESeverityTitlePublished
CVE-2025-15467High 8.8Stack buffer overflow in CMS (Auth)EnvelopedData parsing
Assigned by openssl
Jan 27, 2026
CVE-2025-40798High 7.5A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UM…
Assigned by siemens
Sep 9, 2025
CVE-2025-40797High 7.5A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UM…
Assigned by siemens
Sep 9, 2025
CVE-2025-40796High 7.5A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UM…
Assigned by siemens
Sep 9, 2025
CVE-2025-40795Critical 9.8A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UM…
Assigned by siemens
Sep 9, 2025
CVE-2025-30033High 7.8The affected setup component is vulnerable to DLL hijacking.
Assigned by siemens
Aug 12, 2025
CVE-2024-54678High 8.2A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), SIMATIC S7-PLCSIM V17 (All ve…
Assigned by siemens
Aug 12, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Essential cookies only, unless you allow a Google ads cookie. See our .