BlackTreeCVE Intelligence
← Back to the CVE catalogue
Full vulnerability report · 2025
CVE-2025-30033High confidence

The affected setup component is vulnerable to DLL hijacking

Siemens · Automation License Manager V6.0

Official source article: Siemens SSA-282044 ↗. Check the applicable product and release in the original source.

8.5HighCVSS 4.0
Recommended action
Patch only the product branches with a verified fix

High technical severity; prioritise exposed affected systems while verifying vendor guidance. Verified remediation exists for at least one product or source, but 139 structured product or package states remain unresolved. Apply remediation only to the exact product branch confirmed by its source.

Fix availability varies by product
R
Operational reassessment

Published severity in operational context

Open reassessment dashboard →
Published severityHighOperational priority:High, unchanged from published severity.unchanged

Evidence used

  • No CISA KEV confirmation is currently recorded.
  • EPSS is 0.21% for the current model date.

Compensating controls

  • Validate the affected product branch and deploy the verified fixed release.
  • Restrict local access and enforce least privilege on affected hosts.
  • Monitor vendor guidance and exploitation sources for a material change.

Verification

  1. Confirm that the asset runs Siemens Automation License Manager V6.0 and falls inside the recorded affected range.
  2. Verify the installed build against the product-specific fixed version after deployment.
  3. Validate exposure, authentication requirements and compensating controls in the actual environment.
  4. Reopen this reassessment when CVSS, KEV, EPSS, exploit evidence or remediation changes.
Mitigation target: Within 30 daysRemediation target: Within 180 days

This automated reassessment organises public evidence. It does not know asset exposure, business impact or control effectiveness and does not replace CVSS or a human risk decision.

Cross-source reconciliation

Remediation availability differs by product scope

Verified remediation exists for at least one product or source, but 139 structured product or package states remain unresolved. Apply remediation only to the exact product branch confirmed by its source.

Direct vendor intelligence

Authoritative vendor CSAF and VEX advisories

Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.

1 current
SSA-282044 · CSAF 2.0 · revision 10 · interimSiemens ProductCERTSSA-282044: DLL Hijacking Vulnerability in Siemens Web Installer used by the Online Software Delivery
139 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • Automation License Manager V6.0
  • OpenPCS 7 V10.0
  • SIMATIC WinCC Runtime Advanced < V17.9
  • SIMATIC WinCC Runtime Professional < V21
  • SIMATIC WinCC Runtime Professional V20
  • SIMATIC WinCC TeleControl
  • SIMATIC WinCC Unified Line Coordination < V20
  • SIMATIC WinCC Unified PC Runtime V18
  • SIMATIC WinCC Unified PC Runtime V19
  • SIMATIC WinCC Unified PC Runtime V20
  • SIMATIC WinCC Unified Sequence < V20
  • SIMATIC WinCC V7.5 < V7.5.2.20
Summary
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
Remediation
Update to V1.5.5.0 or later version
Optional official sources

National CERT insights
?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.

Choose official national sources for this report. Each advisory shows its original language. Your selection is remembered on this device and included in shared links.

Official European source

ENISA European Vulnerability Database

Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.

1 current
ENISA EUVD identifier

EUVD-2025-24250

No EUVD known-exploited evidence

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

EUVD state
Present in the current official mapping
Known exploitation
Not present in the current ENISA EUVD known-exploited dataset. This is not proof of no exploitation.
ENISA score
8.5 · CVSS 4.0
Advisory evidence
No linked advisory details stored yet
Recommended actionPatch only the product branches with a verified fix

High technical severity; prioritise exposed affected systems while verifying vendor guidance. Verified remediation exists for at least one product or source, but 139 structured product or package states remain unresolved. Apply remediation only to the exact product branch confirmed by its source.

Fix availability varies by product
01

What, why and how

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

What

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

Why

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

How

An attacker operating through local access may attempt exploitation when the stated preconditions are met. If successful, the issue may execute code or commands in the affected security context.

What

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

Why

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

How

An attacker operating through local access may attempt exploitation when the stated preconditions are met. If successful, the issue may execute code or commands in the affected security context.

02

Exploit reality and attack path

CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.

Observed exploitation
?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.
No confirmed evidence

No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.

Public PoC / exploit material
?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.
None recorded

No exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.

Likely attack path
local access → Uncontrolled Search Path Element → execute code or commands in the affected security context
Attack surface
Local
Privileges required
None: unauthenticated exploitation is possible
User interaction
Passive interaction required
Attack complexity
Low: no specialised conditions are recorded
Security boundary
Not a CVSS 4.0 base metric
Weakness
?CWE means Common Weakness Enumeration: a standard category for the underlying weakness.
CWE-427 ↗

CWE-427: Uncontrolled Search Path Element. The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

CVSS vector
?CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Common Vulnerability Scoring System 4.0: the compact vector below is decoded into plain language.

AVLocalAttack vector: The attacker needs local access to the vulnerable system.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.ATNoneAttack requirements: No additional deployment or execution condition is required.PRNonePrivileges required: The attacker does not need an account or existing privileges.UIPassiveUser interaction: A user must unknowingly interact with the vulnerable system.VCHighVulnerable-system confidentiality: A successful attack can cause a major loss.VIHighVulnerable-system integrity: A successful attack can cause a major loss.VAHighVulnerable-system availability: A successful attack can cause a major loss.SCNoneSubsequent-system confidentiality: No direct loss is represented by this metric.SINoneSubsequent-system integrity: No direct loss is represented by this metric.SANoneSubsequent-system availability: No direct loss is represented by this metric.
Post-exploitation / living off the land
After compromise, an attacker may use built-in shells, scripting engines, scheduled tasks and native network utilities for discovery, persistence or movement. This is a plausible LoTL path, not evidence that it has occurred for every attack.
UnauthenticatedRemote code executionCWE-427
A

Official authority intelligence

Only matched European and national findings are included. Language selectors and unavailable sources are omitted.

ENISA EUVD · EUVD-2025-24250Official EUVD mapping

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

Official EUVD record ↗
BSI · German · WID-SEC-2025-1771Mehrere Siemens-Produkte: Schwachstelle ermöglicht Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in Siemens SIMATIC Logon, Siemens SIMATIC S7, Siemens SIMATIC STEP 7, Siemens SIMATIC WinCC und Siemens TIA Portal ausnutzen, um beliebigen Programmcode auszuführen.

Official advisory ↗
CERT-FR · French · CERTFR-2025-AVI-0677Multiples vulnérabilités dans les produits Siemens

in de sécurité Siemens SSA-707630 du 12 août 2025 Bulletin de sécurité Siemens SSA-894058 du 12 août 2025 Une gestion de version détaillée se trouve à la fin de ce document. Risques Atteinte à l'intégrité des données Atteinte à la confidentialité des données Contournement de la politique de sécurité Déni de service à distance Exécution de code arbitraire à distance Non spécifié par l'éditeur Élévation de privilèges Systèmes affectés SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 versions antérieures à 3.2 SCALANCE XCM-/XRM-/XCH-/XRH-300 family versions antérieures à 3.2 SIMATIC Automation Tool SDK Windows toutes versions pour la vulnérabilité CVE-2025-30033 SIMATIC Automation Tool toutes versions pour la vulnérabilité CVE-2025-30033 SIMATIC BATCH V10.0 toutes versions pour la vulnérabilité CVE-2025-30033 SIMATIC BATCH V9.1 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2025-30033. SIMATIC Control Function Library (CFL) toutes versions pour la vulnérabilité CVE-2025-30033 SIMATIC D7-SYS toutes versions pour la vulnérabilité CVE-2025-30033 SIMATIC eaSie Core Package (6DL5424-0AX00-0AV8) toutes versions pour la vulnérabilité CVE-2025-30033 SIMATIC eaSie PCS 7 Skill Package (6DL5424-0BX00-0AV8) toutes versions pour la vulnérab

Official advisory ↗
NCSC-NL · Dutch · NCSC-2026-0346Kwetsbaarheden verholpen in Siemens producten

A setup component is vulnerable to DLL hijacking, enabling attackers to execute arbitrary code during legitimate application installations.

Official advisory ↗
NCSC-NL · Dutch · NCSC-2025-0246Kwetsbaarheden verholpen in Siemens producten

De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: * Denial-of-Service (DoS) * Cross-Site Scripting * Manipulatie van gegevens * Omzeilen van een beveiligingsmaatregel * (Remote) code execution (SYSTEM rechten) * (Remote) code execution (Gebruikersrechten) * Toegang tot gevoelige gegevens * Verhogen van rechten De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.

Official advisory ↗
03

Patch and workaround

Operational remediation based on structured source evidence.

Status
?Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.
Fix availability varies by product
Affected
Fixed
Update to V1.5.5.0 or later version
Action
Use the product-specific evidence above. Patch only products with a verified fixed release, and keep every affected or under-investigation state without a matching fix in the remediation queue.
Workaround
No verified workaround is recorded. Limit untrusted access and use least privilege until authoritative guidance is available.
04

Evidence and provenance

Published 12 Aug 2025 · Last source change 8 Sept 2026, 08:11 UTC · CWE-427 · Uncontrolled Search Path Element

CVE recordCVE.org · 5.2
CVSS sourceCNA
EPSS source
?The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.
FIRST · tracked since 2026-08-14
European sourceENISA EUVD · EUVD-2025-24250
Product sourceVendor CSAF · Siemens ProductCERT
Remediation sourceVendor CSAF · Siemens ProductCERT
CWE sourceCNA
NVD statusNVD not scheduled

Core structured fields are present and their contributing authorities are shown above.

Material change intelligence

What changed after publication

View recent updates ↗
  1. Affected versionsThe structured affected or fixed version information changed.
    Before
    Automation License Manager V6.0: < *; Automation License Manager V6.2: < V6.2 Upd3; CEMAT V10.0: < *; CP PtP Param configuring interface: < *; Create MyConfig (CMC): < V6.9; Energy Support Library (EnSL): < *; FM Configuration Package: < *; Modular PID CTRL Tool: < *; MultiFieldbus Configuration Tool (MFCT): < V1.5.5.0; OpenPCS 7 V10.0: < *; OpenPCS 7 V9.1: < *; Siemens Network Planner (SINETPLAN): < *; SIMATIC Automation Tool: < V5.0 SP4; SIMATIC Automation Tool SDK Windows: < V5.0 SP4; SIMATIC BATCH V10.0: < *; SIMATIC BATCH V9.1: < *; SIMATIC Control Function Library (CFL) V1.x: < *; SIMATIC Control Function Library (CFL) V2.x: < *; SIMATIC Control Function Library (CFL) V3.x: < V3.1.0.2; SIMATIC Control Function Library (CFL) V4.x: < V4.1; SIMATIC D7-SYS: < V10.0 SP1; SIMATIC eaSie Core Package: < *; SIMATIC eaSie Document Skills: < *; SIMATIC eaSie PCS 7 Skill Package: < *; SIMATIC eaSie Workflow Skills: < *; SIMATIC Energy Suite V17: < *; SIMATIC Energy Suite V18: < *; SIMATIC Energy Suite V19: < V19 Update 4; SIMATIC Logon V1.6: < *; SIMATIC Logon V2.0: < V2.0 Upd3; SIMATIC Management Agent: < V9.1 SP1 Upd8; SIMATIC Management Console: < V9.1 SP1 Upd8; SIMATIC MTP CREATOR V2.x: < V2.1; SIMATIC MTP CREATOR V3.x: < *; SIMATIC MTP CREATOR V4.x: < V4.1.0.1; SIMATIC MTP CREATOR V5.x: < V5.0.0.1; SIMATIC MTP Integrator V1.x: < *; SIMATIC MTP Integrator V2.x: < *; SIMATIC NET PC Software V16: < *; SIMATIC NET PC Software V17: < *; SIMATIC NET PC Software V18: < *; SIMATIC NET PC Software V19: < *; SIMATIC NET PC Software V20: < V20.0 Update 1; SIMATIC ODK 1500S: < *; SIMATIC PCS 7 Advanced Process Faceplates V9.1: < V9.1 SP2 Upd4; SIMATIC PCS 7 Advanced Process Functions V2.1: < *; SIMATIC PCS 7 Advanced Process Functions V2.2: < *; SIMATIC PCS 7 Advanced Process Graphics V10.0: < *; SIMATIC PCS 7 Advanced Process Graphics V9.1: < *; SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0: < *; SIMATIC PCS 7 Advanced Process Library V9.1: < V9.1 SP2 Upd6; SIMATIC PCS 7 Basis Faceplates V9.1: < V9.1 SP2 Upd2; SIMATIC PCS 7 Basis Library V10.0: < V10.0 SP1 Upd2; SIMATIC PCS 7 Basis Library V9.1: < V9.1 SP2 Upd8; SIMATIC PCS 7 Industry Library V10.0: < *; SIMATIC PCS 7 Industry Library V9.0: < *; SIMATIC PCS 7 Industry Library V9.1: < *; SIMATIC PCS 7 Logic Matrix V10.0: < *; SIMATIC PCS 7 Logic Matrix V9.1: < V9.1 Upd8; SIMATIC PCS 7 MPC Configurator: < *; SIMATIC PCS 7 PowerControl: < *; SIMATIC PCS 7 Standard Chemical Library V10.0: < *; SIMATIC PCS 7 Standard Chemical Library V9.1: < *; SIMATIC PCS 7 TeleControl: < *; SIMATIC PCS 7 V10.0: < V10.0 SP1 UC01; SIMATIC PCS 7 V9.1: < V9.1 SP1 UC08; SIMATIC PCS 7/OPEN OS V9.1: < *; SIMATIC PCS neo V5.0: < *; SIMATIC PCS neo V6.0: < V6.0 SP1; SIMATIC PDM Maintenance Station V5.0: < *; SIMATIC PDM V9.2: < *; SIMATIC PDM V9.3: < V9.3 SP1 Upd2; SIMATIC Process Function Library (PFL) V4.0: < *; SIMATIC Process Historian 2020: < *; SIMATIC Process Historian 2022: < *; SIMATIC Process Historian 2024: < V2024 SP1 Upd2; SIMATIC ProSave V17: < V17 Update 9; SIMATIC ProSave V18: < *; SIMATIC ProSave V19: < V19 Update 4; SIMATIC ProSave V20: < *; SIMATIC Route Control V10.0: < *; SIMATIC Route Control V9.1: < *; SIMATIC S7 F Systems V6.3: < *; SIMATIC S7 F Systems V6.4: < *; SIMATIC S7-1500 Software Controller V2: < *; SIMATIC S7-1500 Software Controller V3: < V31.1.5; SIMATIC S7-Fail-safe Configuration Tool (S7-FCT): < V4.0.1; SIMATIC S7-PCT: < V3.5 SP4 Update 1; SIMATIC S7-PLCSIM Advanced: < V7.0 Update 1; SIMATIC S7-PLCSIM V17: < *; SIMATIC S7-PLCSIM V18: < *; SIMATIC S7-PLCSIM V19: < *; SIMATIC S7-PLCSIM V20: < V20 Update 1; SIMATIC Safety Matrix: < *; SIMATIC STEP 7 CFC V19: < *; SIMATIC STEP 7 CFC V20: < *; SIMATIC STEP 7 V5.7: < *; SIMATIC Target: < V6.0 SP3; SIMATIC WinCC flexible ES: < *; SIMATIC WinCC Runtime Advanced: < V17 Update 9; SIMATIC WinCC Runtime Professional: < V21; SIMATIC WinCC Runtime Professional V20: < *; SIMATIC WinCC TeleControl: < *; 36 additional product groups retained in the authoritative source · Fixed: No fixed version is explicitly recorded in the structured CVE data.
    After
    Automation License Manager V6.0: < *; Automation License Manager V6.2: < V6.2 Upd3; CEMAT V10.0: < *; CP PtP Param configuring interface: < *; Create MyConfig (CMC): < V6.9; Energy Support Library (EnSL): < *; FM Configuration Package: < *; Modular PID CTRL Tool: < *; MultiFieldbus Configuration Tool (MFCT): < V1.5.5.0; OpenPCS 7 V10.0: < *; OpenPCS 7 V9.1: < *; Siemens Network Planner (SINETPLAN): < V2.0 SP2; SIMATIC Automation Tool: < V5.0 SP4; SIMATIC Automation Tool SDK Windows: < V5.0 SP4; SIMATIC BATCH V10.0: < *; SIMATIC BATCH V9.1: < *; SIMATIC Control Function Library (CFL) V1.x: < *; SIMATIC Control Function Library (CFL) V2.x: < *; SIMATIC Control Function Library (CFL) V3.x: < V3.1.0.2; SIMATIC Control Function Library (CFL) V4.x: < V4.1; SIMATIC D7-SYS: < V10.0 SP1; SIMATIC eaSie Core Package: < *; SIMATIC eaSie Document Skills: < *; SIMATIC eaSie PCS 7 Skill Package: < *; SIMATIC eaSie Workflow Skills: < *; SIMATIC Energy Suite V17: < *; SIMATIC Energy Suite V18: < *; SIMATIC Energy Suite V19: < V19 Update 4; SIMATIC Logon V1.6: < *; SIMATIC Logon V2.0: < V2.0 Upd3; SIMATIC Management Agent: < V9.1 SP1 Upd8; SIMATIC Management Console: < V9.1 SP1 Upd8; SIMATIC MTP CREATOR V2.x: < V2.1; SIMATIC MTP CREATOR V3.x: < *; SIMATIC MTP CREATOR V4.x: < V4.1.0.1; SIMATIC MTP CREATOR V5.x: < V5.0.0.1; SIMATIC MTP Integrator V1.x: < *; SIMATIC MTP Integrator V2.x: < *; SIMATIC NET PC Software V16: < *; SIMATIC NET PC Software V17: < *; SIMATIC NET PC Software V18: < *; SIMATIC NET PC Software V19: < *; SIMATIC NET PC Software V20: < V20.0 Update 1; SIMATIC ODK 1500S: < *; SIMATIC PCS 7 Advanced Process Faceplates V9.1: < V9.1 SP2 Upd4; SIMATIC PCS 7 Advanced Process Functions V2.1: < *; SIMATIC PCS 7 Advanced Process Functions V2.2: < *; SIMATIC PCS 7 Advanced Process Graphics V10.0: < *; SIMATIC PCS 7 Advanced Process Graphics V9.1: < *; SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0: < *; SIMATIC PCS 7 Advanced Process Library V9.1: < V9.1 SP2 Upd6; SIMATIC PCS 7 Basis Faceplates V9.1: < V9.1 SP2 Upd2; SIMATIC PCS 7 Basis Library V10.0: < V10.0 SP1 Upd2; SIMATIC PCS 7 Basis Library V9.1: < V9.1 SP2 Upd8; SIMATIC PCS 7 Industry Library V10.0: < *; SIMATIC PCS 7 Industry Library V9.0: < *; SIMATIC PCS 7 Industry Library V9.1: < *; SIMATIC PCS 7 Logic Matrix V10.0: < *; SIMATIC PCS 7 Logic Matrix V9.1: < V9.1 Upd8; SIMATIC PCS 7 MPC Configurator: < *; SIMATIC PCS 7 PowerControl V9.1: < *; SIMATIC PCS 7 Standard Chemical Library V10.0: < *; SIMATIC PCS 7 Standard Chemical Library V9.1: < *; SIMATIC PCS 7 TeleControl V9.1: < *; SIMATIC PCS 7 V10.0: < V10.0 SP1 UC01; SIMATIC PCS 7 V9.1: < V9.1 SP1 UC08; SIMATIC PCS 7/OPEN OS V9.1: < *; SIMATIC PCS neo V5.0: < *; SIMATIC PCS neo V6.0: < V6.0 SP1; SIMATIC PDM Maintenance Station V5.0: < *; SIMATIC PDM V9.2: < *; SIMATIC PDM V9.3: < V9.3 SP1 Upd2; SIMATIC Process Function Library (PFL) V4.0: < *; SIMATIC Process Historian 2020: < *; SIMATIC Process Historian 2022: < *; SIMATIC Process Historian 2024: < V2024 SP1 Upd2; SIMATIC ProSave V17: < V17 Update 9; SIMATIC ProSave V18: < *; SIMATIC ProSave V19: < V19 Update 4; SIMATIC ProSave V20: < *; SIMATIC Route Control V10.0: < *; SIMATIC Route Control V9.1: < *; SIMATIC S7 F Systems V6.3: < *; SIMATIC S7 F Systems V6.4: < *; SIMATIC S7-1500 Software Controller V2: < *; SIMATIC S7-1500 Software Controller V3: < V31.1.5; SIMATIC S7-Fail-safe Configuration Tool (S7-FCT): < V4.0.1; SIMATIC S7-PCT: < V3.5 SP4 Update 1; SIMATIC S7-PLCSIM Advanced: < V7.0 Update 1; SIMATIC S7-PLCSIM V17: < *; SIMATIC S7-PLCSIM V18: < *; SIMATIC S7-PLCSIM V19: < *; SIMATIC S7-PLCSIM V20: < V20 Update 1; SIMATIC Safety Matrix: < *; SIMATIC STEP 7 CFC V19: < *; SIMATIC STEP 7 CFC V20: < *; SIMATIC STEP 7 V5.7: < *; SIMATIC Target: < V6.0 SP3; SIMATIC WinCC flexible ES: < *; SIMATIC WinCC Runtime Advanced: < V17 Update 9; SIMATIC WinCC Runtime Professional: < V21; SIMATIC WinCC Runtime Professional V20: < *; SIMATIC WinCC TeleControl: < *; 36 additional product groups retained in the authoritative source · Fixed: No fixed version is explicitly recorded in the structured CVE data.
    CNA ↗
  2. Affected versionsThe structured affected or fixed version information changed.
    Before
    Automation License Manager V6.0: < *; Automation License Manager V6.2: < V6.2 Upd3; CEMAT V10.0: < *; CP PtP Param configuring interface: < *; Create MyConfig (CMC): < V6.9; Energy Support Library (EnSL): < *; FM Configuration Package: < *; Modular PID CTRL Tool: < *; MultiFieldbus Configuration Tool (MFCT): < V1.5.5.0; OpenPCS 7 V10.0: < *; OpenPCS 7 V9.1: < *; Siemens Network Planner (SINETPLAN): < V2.0 SP2; SIMATIC Automation Tool: < V5.0 SP4; SIMATIC Automation Tool SDK Windows: < V5.0 SP4; SIMATIC BATCH V10.0: < *; SIMATIC BATCH V9.1: < *; SIMATIC Control Function Library (CFL) V1.x: < *; SIMATIC Control Function Library (CFL) V2.x: < *; SIMATIC Control Function Library (CFL) V3.x: < V3.1.0.2; SIMATIC Control Function Library (CFL) V4.x: < V4.1; SIMATIC D7-SYS: < V10.0 SP1; SIMATIC eaSie Core Package: < *; SIMATIC eaSie Document Skills: < *; SIMATIC eaSie PCS 7 Skill Package: < *; SIMATIC eaSie Workflow Skills: < *; SIMATIC Energy Suite V17: < *; SIMATIC Energy Suite V18: < *; SIMATIC Energy Suite V19: < V19 Update 4; SIMATIC Logon V1.6: < *; SIMATIC Logon V2.0: < V2.0 Upd3; SIMATIC Management Agent: < V9.1 SP1 Upd8; SIMATIC Management Console: < V9.1 SP1 Upd8; SIMATIC MTP CREATOR V2.x: < V2.1; SIMATIC MTP CREATOR V3.x: < *; SIMATIC MTP CREATOR V4.x: < V4.1.0.1; SIMATIC MTP CREATOR V5.x: < V5.0.0.1; SIMATIC MTP Integrator V1.x: < *; SIMATIC MTP Integrator V2.x: < *; SIMATIC NET PC Software V16: < *; SIMATIC NET PC Software V17: < *; SIMATIC NET PC Software V18: < *; SIMATIC NET PC Software V19: < *; SIMATIC NET PC Software V20: < V20.0 Update 1; SIMATIC ODK 1500S: < *; SIMATIC PCS 7 Advanced Process Faceplates V9.1: < V9.1 SP2 Upd4; SIMATIC PCS 7 Advanced Process Functions V2.1: < *; SIMATIC PCS 7 Advanced Process Functions V2.2: < *; SIMATIC PCS 7 Advanced Process Graphics V10.0: < *; SIMATIC PCS 7 Advanced Process Graphics V9.1: < *; SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0: < *; SIMATIC PCS 7 Advanced Process Library V9.1: < V9.1 SP2 Upd6; SIMATIC PCS 7 Basis Faceplates V9.1: < V9.1 SP2 Upd2; SIMATIC PCS 7 Basis Library V10.0: < V10.0 SP1 Upd2; SIMATIC PCS 7 Basis Library V9.1: < V9.1 SP2 Upd8; SIMATIC PCS 7 Industry Library V10.0: < *; SIMATIC PCS 7 Industry Library V9.0: < *; SIMATIC PCS 7 Industry Library V9.1: < *; SIMATIC PCS 7 Logic Matrix V10.0: < *; SIMATIC PCS 7 Logic Matrix V9.1: < V9.1 Upd8; SIMATIC PCS 7 MPC Configurator: < *; SIMATIC PCS 7 PowerControl V9.1: < *; SIMATIC PCS 7 Standard Chemical Library V10.0: < *; SIMATIC PCS 7 Standard Chemical Library V9.1: < *; SIMATIC PCS 7 TeleControl V9.1: < *; SIMATIC PCS 7 V10.0: < V10.0 SP1 UC01; SIMATIC PCS 7 V9.1: < V9.1 SP1 UC08; SIMATIC PCS 7/OPEN OS V9.1: < *; SIMATIC PCS neo V5.0: < *; SIMATIC PCS neo V6.0: < V6.0 SP1; SIMATIC PDM Maintenance Station V5.0: < *; SIMATIC PDM V9.2: < *; SIMATIC PDM V9.3: < V9.3 SP1 Upd2; SIMATIC Process Function Library (PFL) V4.0: < *; SIMATIC Process Historian 2020: < *; SIMATIC Process Historian 2022: < *; SIMATIC Process Historian 2024: < V2024 SP1 Upd2; SIMATIC ProSave V17: < V17 Update 9; SIMATIC ProSave V18: < *; SIMATIC ProSave V19: < V19 Update 4; SIMATIC ProSave V20: < *; SIMATIC Route Control V10.0: < *; SIMATIC Route Control V9.1: < *; SIMATIC S7 F Systems V6.3: < *; SIMATIC S7 F Systems V6.4: < *; SIMATIC S7-1500 Software Controller V2: < *; SIMATIC S7-1500 Software Controller V3: < V31.1.5; SIMATIC S7-Fail-safe Configuration Tool (S7-FCT): < V4.0.1; SIMATIC S7-PCT: < V3.5 SP4 Update 1; SIMATIC S7-PLCSIM Advanced: < V7.0 Update 1; SIMATIC S7-PLCSIM V17: < *; SIMATIC S7-PLCSIM V18: < *; SIMATIC S7-PLCSIM V19: < *; SIMATIC S7-PLCSIM V20: < V20 Update 1; SIMATIC Safety Matrix: < *; SIMATIC STEP 7 CFC V19: < *; SIMATIC STEP 7 CFC V20: < *; SIMATIC STEP 7 V5.7: < *; SIMATIC Target: < V6.0 SP3; SIMATIC WinCC flexible ES: < *; SIMATIC WinCC Runtime Advanced: < V17 Update 9; SIMATIC WinCC Runtime Professional: < V21; SIMATIC WinCC Runtime Professional V20: < *; SIMATIC WinCC TeleControl: < *; 36 additional product groups retained in the authoritative source · Fixed: No fixed version is explicitly recorded in the structured CVE data.
    After
    Automation License Manager V6.0: < *; Automation License Manager V6.2: < V6.2 Upd3; CEMAT V10.0: < *; CP PtP Param configuring interface: < *; Create MyConfig (CMC): < V6.9; Energy Support Library (EnSL): < *; FM Configuration Package: < *; Modular PID CTRL Tool: < *; MultiFieldbus Configuration Tool (MFCT): < V1.5.5.0; OpenPCS 7 V10.0: < *; OpenPCS 7 V9.1: < *; Siemens Network Planner (SINETPLAN): < V2.0 SP2; SIMATIC Automation Tool: < V5.0 SP4; SIMATIC Automation Tool SDK Windows: < V5.0 SP4; SIMATIC BATCH V10.0: < *; SIMATIC BATCH V9.1: < *; SIMATIC Control Function Library (CFL) V1.x: < *; SIMATIC Control Function Library (CFL) V2.x: < *; SIMATIC Control Function Library (CFL) V3.x: < V3.1.0.2; SIMATIC Control Function Library (CFL) V4.x: < V4.1; SIMATIC D7-SYS: < V10.0 SP1; SIMATIC eaSie Core Package: < *; SIMATIC eaSie Document Skills: < *; SIMATIC eaSie PCS 7 Skill Package: < *; SIMATIC eaSie Workflow Skills: < *; SIMATIC Energy Suite V17: < *; SIMATIC Energy Suite V18: < *; SIMATIC Energy Suite V19: < V19 Update 4; SIMATIC Logon V1.6: < *; SIMATIC Logon V2.0: < V2.0 Upd3; SIMATIC Management Agent: < V9.1 SP1 Upd8; SIMATIC Management Console: < V9.1 SP1 Upd8; SIMATIC MTP CREATOR V2.x: < V2.1; SIMATIC MTP CREATOR V3.x: < *; SIMATIC MTP CREATOR V4.x: < V4.1.0.1; SIMATIC MTP CREATOR V5.x: < V5.0.0.1; SIMATIC MTP Integrator V1.x: < *; SIMATIC MTP Integrator V2.x: < *; SIMATIC NET PC Software V16: < *; SIMATIC NET PC Software V17: < *; SIMATIC NET PC Software V18: < *; SIMATIC NET PC Software V19: < *; SIMATIC NET PC Software V20: < V20.0 Update 1; SIMATIC ODK 1500S: < *; SIMATIC PCS 7 Advanced Process Faceplates V9.1: < V9.1 SP2 Upd4; SIMATIC PCS 7 Advanced Process Functions V2.1: < *; SIMATIC PCS 7 Advanced Process Functions V2.2: < *; SIMATIC PCS 7 Advanced Process Graphics V10.0: < *; SIMATIC PCS 7 Advanced Process Graphics V9.1: < *; SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0: < *; SIMATIC PCS 7 Advanced Process Library V9.1: < V9.1 SP2 Upd6; SIMATIC PCS 7 Basis Faceplates V9.1: < V9.1 SP2 Upd2; SIMATIC PCS 7 Basis Library V10.0: < V10.0 SP1 Upd2; SIMATIC PCS 7 Basis Library V9.1: < V9.1 SP2 Upd8; SIMATIC PCS 7 Industry Library V10.0: < *; SIMATIC PCS 7 Industry Library V9.0: < *; SIMATIC PCS 7 Industry Library V9.1: < *; SIMATIC PCS 7 Logic Matrix V10.0: < *; SIMATIC PCS 7 Logic Matrix V9.1: < V9.1 Upd8; SIMATIC PCS 7 MPC Configurator: < *; SIMATIC PCS 7 PowerControl V9.1: < *; SIMATIC PCS 7 Standard Chemical Library V10.0: < *; SIMATIC PCS 7 Standard Chemical Library V9.1: < *; SIMATIC PCS 7 TeleControl V9.1: < *; SIMATIC PCS 7 V10.0: < V10.0 SP1 UC01; SIMATIC PCS 7 V9.1: < V9.1 SP1 UC08; SIMATIC PCS 7/OPEN OS V9.1: < *; SIMATIC PCS neo V5.0: < *; SIMATIC PCS neo V6.0: < V6.0 SP1; SIMATIC PDM Maintenance Station V5.0: < *; SIMATIC PDM V9.2: < *; SIMATIC PDM V9.3: < V9.3 SP1 Upd2; SIMATIC Process Function Library (PFL) V4.0: < *; SIMATIC Process Historian 2020: < *; SIMATIC Process Historian 2022: < *; SIMATIC Process Historian 2024: < V2024 SP1 Upd2; SIMATIC ProSave V17: < V17 Update 9; SIMATIC ProSave V18: < *; SIMATIC ProSave V19: < V19 Update 4; SIMATIC ProSave V20: < *; SIMATIC Route Control V10.0: < *; SIMATIC Route Control V9.1: < *; SIMATIC S7 F Systems V6.3: < *; SIMATIC S7 F Systems V6.4: < *; SIMATIC S7-1500 Software Controller V2: < *; SIMATIC S7-1500 Software Controller V3: < V31.1.5; SIMATIC S7-Fail-safe Configuration Tool (S7-FCT): < V4.0.1; SIMATIC S7-PCT: < V3.5 SP4 Update 1; SIMATIC S7-PLCSIM Advanced: < V7.0 Update 1; SIMATIC S7-PLCSIM V17: < *; SIMATIC S7-PLCSIM V18: < *; SIMATIC S7-PLCSIM V19: < *; SIMATIC S7-PLCSIM V20: < V20 Update 1; SIMATIC Safety Matrix: < *; SIMATIC STEP 7 CFC V19: < *; SIMATIC STEP 7 CFC V20: < *; SIMATIC STEP 7 V5.7: < *; SIMATIC Target: < V6.0 SP3; SIMATIC WinCC flexible ES: < *; SIMATIC WinCC Runtime Advanced: < V17 Update 9; SIMATIC WinCC Runtime Professional: < V21; SIMATIC WinCC Runtime Professional V20: < *; SIMATIC WinCC TeleControl: < *; 36 additional product groups retained in the authoritative source · Fixed: Update to V1.5.5.0 or later version
    Siemens ProductCERT ↗
  3. Remediation statusRemediation status changed from Awaiting fix to Patch available.
    Before
    Awaiting fix
    After
    Patch available
    Siemens ProductCERT ↗
  4. Affected versionsThe structured affected or fixed version information changed.
    Before
    Automation License Manager V6.0; Automation License Manager V6.2 < V6.2.3; CEMAT V10.0; CP PtP Param configuring interface; Create MyConfig (CMC) < V6.9; Energy Support Library (EnSL); FM Configuration Package; Modular PID CTRL Tool; MultiFieldbus Configuration Tool (MFCT) < V1.5.5.0; OpenPCS 7 V10.0; OpenPCS 7 V9.1; Siemens Network Planner (SINETPLAN); SIMATIC Automation Tool < V5.0.4; SIMATIC Automation Tool SDK Windows < V5.0.4; SIMATIC BATCH V10.0; SIMATIC BATCH V9.1; SIMATIC Control Function Library (CFL) V1.x; SIMATIC Control Function Library (CFL) V2.x; SIMATIC Control Function Library (CFL) V3.x < V3.1.0.2; SIMATIC Control Function Library (CFL) V4.x < V4.1; SIMATIC D7-SYS < V10.0.1; SIMATIC eaSie Core Package (6DL5424-0AX00-0AV8); SIMATIC eaSie Document Skills; SIMATIC eaSie PCS 7 Skill Package (6DL5424-0BX00-0AV8); SIMATIC eaSie Workflow Skills; SIMATIC Energy Suite V17; SIMATIC Energy Suite V18; SIMATIC Energy Suite V19 < V19.4; SIMATIC Logon V1.6; SIMATIC Logon V2.0 < V2.0.3; and 109 more
    After
    Automation License Manager V6.0; OpenPCS 7 V10.0; SIMATIC WinCC Runtime Advanced < V17.9; SIMATIC WinCC Runtime Professional < V21; SIMATIC WinCC Runtime Professional V20; SIMATIC WinCC TeleControl; SIMATIC WinCC Unified Line Coordination < V20; SIMATIC WinCC Unified PC Runtime V18; SIMATIC WinCC Unified PC Runtime V19; SIMATIC WinCC Unified PC Runtime V20; SIMATIC WinCC Unified Sequence < V20; SIMATIC WinCC V7.5 < V7.5.2.20; OpenPCS 7 V9.1; SIMATIC WinCC V8.0 < V8.0.8; SIMATIC WinCC V8.1 < V8.1.3; SIMATIC WinCC Visualization Architect (SiVArc) V17 < V17.9; SIMATIC WinCC Visualization Architect (SiVArc) V18; SIMATIC WinCC Visualization Architect (SiVArc) V19 < V19.4; SIMATIC WinCC Visualization Architect (SiVArc) V20 < V20.3; SIMIT Rapid Tester; SIMIT Simulation Platform; SINAMICS Startdrive V17; SINAMICS Startdrive V18; Siemens Network Planner (SINETPLAN) < V2.0.2; SINAMICS Startdrive V19; SINAMICS Startdrive V20; SINEC NMS < V4.0; SINEMA Remote Connect Client; SITRANS; Standard PID CTRL Tool; and 109 more
    Siemens ProductCERT ↗
  5. Affected versionsThe structured affected or fixed version information changed.
    Before
    < *; < V6.2 Upd3; < V6.9 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
    After
    Automation License Manager V6.0: < *; Automation License Manager V6.2: < V6.2 Upd3; CEMAT V10.0: < *; CP PtP Param configuring interface: < *; Create MyConfig (CMC): < V6.9; Energy Support Library (EnSL): < *; FM Configuration Package: < *; Modular PID CTRL Tool: < *; MultiFieldbus Configuration Tool (MFCT): < V1.5.5.0; OpenPCS 7 V10.0: < *; OpenPCS 7 V9.1: < *; Siemens Network Planner (SINETPLAN): < *; SIMATIC Automation Tool: < V5.0 SP4; SIMATIC Automation Tool SDK Windows: < V5.0 SP4; SIMATIC BATCH V10.0: < *; SIMATIC BATCH V9.1: < *; SIMATIC Control Function Library (CFL) V1.x: < *; SIMATIC Control Function Library (CFL) V2.x: < *; SIMATIC Control Function Library (CFL) V3.x: < V3.1.0.2; SIMATIC Control Function Library (CFL) V4.x: < V4.1; SIMATIC D7-SYS: < V10.0 SP1; SIMATIC eaSie Core Package: < *; SIMATIC eaSie Document Skills: < *; SIMATIC eaSie PCS 7 Skill Package: < *; SIMATIC eaSie Workflow Skills: < *; SIMATIC Energy Suite V17: < *; SIMATIC Energy Suite V18: < *; SIMATIC Energy Suite V19: < V19 Update 4; SIMATIC Logon V1.6: < *; SIMATIC Logon V2.0: < V2.0 Upd3; SIMATIC Management Agent: < V9.1 SP1 Upd8; SIMATIC Management Console: < V9.1 SP1 Upd8; SIMATIC MTP CREATOR V2.x: < V2.1; SIMATIC MTP CREATOR V3.x: < *; SIMATIC MTP CREATOR V4.x: < V4.1.0.1; SIMATIC MTP CREATOR V5.x: < V5.0.0.1; SIMATIC MTP Integrator V1.x: < *; SIMATIC MTP Integrator V2.x: < *; SIMATIC NET PC Software V16: < *; SIMATIC NET PC Software V17: < *; SIMATIC NET PC Software V18: < *; SIMATIC NET PC Software V19: < *; SIMATIC NET PC Software V20: < V20.0 Update 1; SIMATIC ODK 1500S: < *; SIMATIC PCS 7 Advanced Process Faceplates V9.1: < V9.1 SP2 Upd4; SIMATIC PCS 7 Advanced Process Functions V2.1: < *; SIMATIC PCS 7 Advanced Process Functions V2.2: < *; SIMATIC PCS 7 Advanced Process Graphics V10.0: < *; SIMATIC PCS 7 Advanced Process Graphics V9.1: < *; SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0: < *; SIMATIC PCS 7 Advanced Process Library V9.1: < V9.1 SP2 Upd6; SIMATIC PCS 7 Basis Faceplates V9.1: < V9.1 SP2 Upd2; SIMATIC PCS 7 Basis Library V10.0: < V10.0 SP1 Upd2; SIMATIC PCS 7 Basis Library V9.1: < V9.1 SP2 Upd8; SIMATIC PCS 7 Industry Library V10.0: < *; SIMATIC PCS 7 Industry Library V9.0: < *; SIMATIC PCS 7 Industry Library V9.1: < *; SIMATIC PCS 7 Logic Matrix V10.0: < *; SIMATIC PCS 7 Logic Matrix V9.1: < V9.1 Upd8; SIMATIC PCS 7 MPC Configurator: < *; SIMATIC PCS 7 PowerControl: < *; SIMATIC PCS 7 Standard Chemical Library V10.0: < *; SIMATIC PCS 7 Standard Chemical Library V9.1: < *; SIMATIC PCS 7 TeleControl: < *; SIMATIC PCS 7 V10.0: < V10.0 SP1 UC01; SIMATIC PCS 7 V9.1: < V9.1 SP1 UC08; SIMATIC PCS 7/OPEN OS V9.1: < *; SIMATIC PCS neo V5.0: < *; SIMATIC PCS neo V6.0: < V6.0 SP1; SIMATIC PDM Maintenance Station V5.0: < *; SIMATIC PDM V9.2: < *; SIMATIC PDM V9.3: < V9.3 SP1 Upd2; SIMATIC Process Function Library (PFL) V4.0: < *; SIMATIC Process Historian 2020: < *; SIMATIC Process Historian 2022: < *; SIMATIC Process Historian 2024: < V2024 SP1 Upd2; SIMATIC ProSave V17: < V17 Update 9; SIMATIC ProSave V18: < *; SIMATIC ProSave V19: < V19 Update 4; SIMATIC ProSave V20: < *; SIMATIC Route Control V10.0: < *; SIMATIC Route Control V9.1: < *; SIMATIC S7 F Systems V6.3: < *; SIMATIC S7 F Systems V6.4: < *; SIMATIC S7-1500 Software Controller V2: < *; SIMATIC S7-1500 Software Controller V3: < V31.1.5; SIMATIC S7-Fail-safe Configuration Tool (S7-FCT): < V4.0.1; SIMATIC S7-PCT: < V3.5 SP4 Update 1; SIMATIC S7-PLCSIM Advanced: < V7.0 Update 1; SIMATIC S7-PLCSIM V17: < *; SIMATIC S7-PLCSIM V18: < *; SIMATIC S7-PLCSIM V19: < *; SIMATIC S7-PLCSIM V20: < V20 Update 1; SIMATIC Safety Matrix: < *; SIMATIC STEP 7 CFC V19: < *; SIMATIC STEP 7 CFC V20: < *; SIMATIC STEP 7 V5.7: < *; SIMATIC Target: < V6.0 SP3; SIMATIC WinCC flexible ES: < *; SIMATIC WinCC Runtime Advanced: < V17 Update 9; SIMATIC WinCC Runtime Professional: < V21; SIMATIC WinCC Runtime Professional V20: < *; SIMATIC WinCC TeleControl: < *; 36 additional product groups retained in the authoritative source · Fixed: No fixed version is explicitly recorded in the structured CVE data.
    CNA ↗
Material fields only · duplicate refreshes suppressed · history retained for the configured operational retention period
CVE published
Fixed release recorded from official guidance
ENISA EUVD · EUVD-2025-24250↗CVE authority or vendor reference · Siemens SSA-282044↗Official CVE record (CNA and ADP data)↗NVD record↗
Technical terms and abbreviations used in this report
CVE
Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS
Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS
Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE
Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA
CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP
Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD
National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT
A computer security incident response team that publishes warnings or coordinates incident response.
PoC
Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF
Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL
Living off the land: abuse of legitimate tools or system functions during an attack.
Free version - for non-commercial use only.CVE-2025-30033 · cve.blacktree.nl