Log in Start free

Vulnerability · Published Aug 12, 2025 · Assigned by siemens

CVE-2025-30033

High 7.8

In plain English

A high-severity uncontrolled search path in Automation License Manager V6.0 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 86.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

Affected products (as reported)

VendorProductVersions
Siemens Automation License Manager V6.0 0 – before *
Siemens Automation License Manager V6.2 0 – before V6.2 Upd3
Siemens CEMAT V10.0 0 – before *
Siemens CP PtP Param configuring interface 0 – before *
Siemens Create MyConfig (CMC) 0 – before V6.9
Siemens Energy Support Library (EnSL) 0 – before *
Siemens FM Configuration Package 0 – before *
Siemens Modular PID CTRL Tool 0 – before *
Siemens MultiFieldbus Configuration Tool (MFCT) 0 – before V1.5.5.0
Siemens OpenPCS 7 V10.0 0 – before *
Siemens OpenPCS 7 V9.1 0 – before *
Siemens Siemens Network Planner (SINETPLAN) 0 – before V2.0 SP2
Siemens SIMATIC Automation Tool 0 – before V5.0 SP4
Siemens SIMATIC Automation Tool SDK Windows 0 – before V5.0 SP4
Siemens SIMATIC BATCH V10.0 0 – before *
Siemens SIMATIC BATCH V9.1 0 – before *
Siemens SIMATIC Control Function Library (CFL) V1.x 0 – before *
Siemens SIMATIC Control Function Library (CFL) V2.x 0 – before *
Siemens SIMATIC Control Function Library (CFL) V3.x 0 – before V3.1.0.2
Siemens SIMATIC Control Function Library (CFL) V4.x 0 – before V4.1
Siemens SIMATIC D7-SYS 0 – before V10.0 SP1
Siemens SIMATIC eaSie Core Package 0 – before *
Siemens SIMATIC eaSie Document Skills 0 – before *
Siemens SIMATIC eaSie PCS 7 Skill Package 0 – before *
Siemens SIMATIC eaSie Workflow Skills 0 – before *
Siemens SIMATIC Energy Suite V17 0 – before *
Siemens SIMATIC Energy Suite V18 0 – before *
Siemens SIMATIC Energy Suite V19 0 – before V19 Update 4
Siemens SIMATIC Logon V1.6 0 – before *
Siemens SIMATIC Logon V2.0 0 – before V2.0 Upd3

Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References