A vulnerability was found in Siemens SIMATIC PCS neo 4.1/5.0. It has been classified as problematic. Affected by this issue is some unknown functionality of the component User Management Component. Performing manipulation results in out-of-bounds read.

This vulnerability is identified as CVE-2025-40796. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.