PatchTheCVEuser management component vulnerabilities and fixes
Recent CVEs affecting user management component, with upgrade or downgrade steps. 4 tracked.
Also searched as: usermanagementcomponent.
user management component has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-09-09. Highest priority: CVE-2025-40795 (score 53/100).
- CVE-2025-40795 CRITICAL 9.8 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
- CVE-2025-40796 HIGH 7.5 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
- CVE-2025-40797 HIGH 7.5 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
- CVE-2025-40798 HIGH 7.5 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
FAQ
How do I fix user management component vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is user management component being exploited right now?
None of the tracked user management component CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which user management component CVE should I patch first?
CVE-2025-40795 currently ranks highest (53/100): A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions.