Read the docs
TI-2025-21404 Aliases CVE-2025-30033GHSA-wc4j-qqmp-4vc4

Uncontrolled search path in Siemens Automation License Manager V6.0

Priority LOW 38CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-427.

Summary

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00224 13th percentileScored 2026-11-07
Fix Fixed Automation License Manager V6.2 (Siemens): V6.2 Upd3Create MyConfig (CMC) (Siemens): V6.9+56 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensAutomation License Manager V6.0all versions—No fix listedCNA
SiemensAutomation License Manager V6.2before V6.2 Upd3V6.2 Upd3Patch availableCNA
SiemensCEMAT V10.0all versions—No fix listedCNA
SiemensCP PtP Param configuring interfaceall versions—No fix listedCNA
SiemensCreate MyConfig (CMC)before V6.9V6.9Patch availableCNA
SiemensEnergy Support Library (EnSL)all versions—No fix listedCNA
SiemensFM Configuration Packageall versions—No fix listedCNA
SiemensModular PID CTRL Toolall versions—No fix listedCNA
SiemensMultiFieldbus Configuration Tool (MFCT)before V1.5.5.0V1.5.5.0Patch availableCNA
SiemensOpenPCS 7 V10.0all versions—No fix listedCNA
SiemensOpenPCS 7 V9.1all versions—No fix listedCNA
SiemensSiemens Network Planner (SINETPLAN)before V2.0 SP2V2.0 SP2Patch availableCNA
SiemensSIMATIC Automation Toolbefore V5.0 SP4V5.0 SP4Patch availableCNA
SiemensSIMATIC Automation Tool SDK Windowsbefore V5.0 SP4V5.0 SP4Patch availableCNA
SiemensSIMATIC BATCH V10.0all versions—No fix listedCNA
SiemensSIMATIC BATCH V9.1all versions—No fix listedCNA
SiemensSIMATIC Control Function Library (CFL) V1.xall versions—No fix listedCNA
SiemensSIMATIC Control Function Library (CFL) V2.xall versions—No fix listedCNA
SiemensSIMATIC Control Function Library (CFL) V3.xbefore V3.1.0.2V3.1.0.2Patch availableCNA
SiemensSIMATIC Control Function Library (CFL) V4.xbefore V4.1V4.1Patch availableCNA
SiemensSIMATIC D7-SYSbefore V10.0 SP1V10.0 SP1Patch availableCNA
SiemensSIMATIC eaSie Core Packageall versions—No fix listedCNA
SiemensSIMATIC eaSie Document Skillsall versions—No fix listedCNA
SiemensSIMATIC eaSie PCS 7 Skill Packageall versions—No fix listedCNA
SiemensSIMATIC eaSie Workflow Skillsall versions—No fix listedCNA
SiemensSIMATIC Energy Suite V17all versions—No fix listedCNA
SiemensSIMATIC Energy Suite V18all versions—No fix listedCNA
SiemensSIMATIC Energy Suite V19before V19 Update 4V19 Update 4Patch availableCNA
SiemensSIMATIC Logon V1.6all versions—No fix listedCNA
SiemensSIMATIC Logon V2.0before V2.0 Upd3V2.0 Upd3Patch availableCNA
SiemensSIMATIC Management Agentbefore V9.1 SP1 Upd8V9.1 SP1 Upd8Patch availableCNA
SiemensSIMATIC Management Consolebefore V9.1 SP1 Upd8V9.1 SP1 Upd8Patch availableCNA
SiemensSIMATIC MTP CREATOR V2.xbefore V2.1V2.1Patch availableCNA
SiemensSIMATIC MTP CREATOR V3.xall versions—No fix listedCNA
SiemensSIMATIC MTP CREATOR V4.xbefore V4.1.0.1V4.1.0.1Patch availableCNA
SiemensSIMATIC MTP CREATOR V5.xbefore V5.0.0.1V5.0.0.1Patch availableCNA
SiemensSIMATIC MTP Integrator V1.xall versions—No fix listedCNA
SiemensSIMATIC MTP Integrator V2.xall versions—No fix listedCNA
SiemensSIMATIC NET PC Software V16all versions—No fix listedCNA
SiemensSIMATIC NET PC Software V17all versions—No fix listedCNA
SiemensSIMATIC NET PC Software V18all versions—No fix listedCNA
SiemensSIMATIC NET PC Software V19all versions—No fix listedCNA
SiemensSIMATIC NET PC Software V20before V20.0 Update 1V20.0 Update 1Patch availableCNA
SiemensSIMATIC ODK 1500Sall versions—No fix listedCNA
SiemensSIMATIC PCS 7 Advanced Process Faceplates V9.1before V9.1 SP2 Upd4V9.1 SP2 Upd4Patch availableCNA
SiemensSIMATIC PCS 7 Advanced Process Functions V2.1all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Advanced Process Functions V2.2all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Advanced Process Graphics V10.0all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Advanced Process Graphics V9.1all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Advanced Process Library V9.1before V9.1 SP2 Upd6V9.1 SP2 Upd6Patch availableCNA
SiemensSIMATIC PCS 7 Basis Faceplates V9.1before V9.1 SP2 Upd2V9.1 SP2 Upd2Patch availableCNA
SiemensSIMATIC PCS 7 Basis Library V10.0before V10.0 SP1 Upd2V10.0 SP1 Upd2Patch availableCNA
SiemensSIMATIC PCS 7 Basis Library V9.1before V9.1 SP2 Upd8V9.1 SP2 Upd8Patch availableCNA
SiemensSIMATIC PCS 7 Industry Library V10.0all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Industry Library V9.0all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Industry Library V9.1all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Logic Matrix V10.0all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Logic Matrix V9.1before V9.1 Upd8V9.1 Upd8Patch availableCNA
SiemensSIMATIC PCS 7 MPC Configuratorall versions—No fix listedCNA
SiemensSIMATIC PCS 7 PowerControl V9.1all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Standard Chemical Library V10.0all versions—No fix listedCNA
SiemensSIMATIC PCS 7 Standard Chemical Library V9.1all versions—No fix listedCNA
SiemensSIMATIC PCS 7 TeleControl V9.1all versions—No fix listedCNA
SiemensSIMATIC PCS 7 V10.0before V10.0 SP1 UC01V10.0 SP1 UC01Patch availableCNA
SiemensSIMATIC PCS 7 V9.1before V9.1 SP1 UC08V9.1 SP1 UC08Patch availableCNA
SiemensSIMATIC PCS 7/OPEN OS V9.1all versions—No fix listedCNA
SiemensSIMATIC PCS neo V5.0all versions—No fix listedCNA
SiemensSIMATIC PCS neo V6.0before V6.0 SP1V6.0 SP1Patch availableCNA
SiemensSIMATIC PDM Maintenance Station V5.0all versions—No fix listedCNA
SiemensSIMATIC PDM V9.2all versions—No fix listedCNA
SiemensSIMATIC PDM V9.3before V9.3 SP1 Upd2V9.3 SP1 Upd2Patch availableCNA
SiemensSIMATIC Process Function Library (PFL) V4.0all versions—No fix listedCNA
SiemensSIMATIC Process Historian 2020all versions—No fix listedCNA
SiemensSIMATIC Process Historian 2022all versions—No fix listedCNA
SiemensSIMATIC Process Historian 2024before V2024 SP1 Upd2V2024 SP1 Upd2Patch availableCNA
SiemensSIMATIC ProSave V17before V17 Update 9V17 Update 9Patch availableCNA
SiemensSIMATIC ProSave V18all versions—No fix listedCNA
SiemensSIMATIC ProSave V19before V19 Update 4V19 Update 4Patch availableCNA
SiemensSIMATIC ProSave V20all versions—No fix listedCNA
SiemensSIMATIC Route Control V10.0all versions—No fix listedCNA
SiemensSIMATIC Route Control V9.1all versions—No fix listedCNA
SiemensSIMATIC S7 F Systems V6.3all versions—No fix listedCNA
SiemensSIMATIC S7 F Systems V6.4all versions—No fix listedCNA
SiemensSIMATIC S7-1500 Software Controller V2all versions—No fix listedCNA
SiemensSIMATIC S7-1500 Software Controller V3before V31.1.5V31.1.5Patch availableCNA
SiemensSIMATIC S7-Fail-safe Configuration Tool (S7-FCT)before V4.0.1V4.0.1Patch availableCNA
SiemensSIMATIC S7-PCTbefore V3.5 SP4 Update 1V3.5 SP4 Update 1Patch availableCNA
SiemensSIMATIC S7-PLCSIM Advancedbefore V7.0 Update 1V7.0 Update 1Patch availableCNA
SiemensSIMATIC S7-PLCSIM V17all versions—No fix listedCNA
SiemensSIMATIC S7-PLCSIM V18all versions—No fix listedCNA
SiemensSIMATIC S7-PLCSIM V19all versions—No fix listedCNA
SiemensSIMATIC S7-PLCSIM V20before V20 Update 1V20 Update 1Patch availableCNA
SiemensSIMATIC Safety Matrix V6.3all versions—No fix listedCNA
SiemensSIMATIC STEP 7 CFC V19all versions—No fix listedCNA
SiemensSIMATIC STEP 7 CFC V20all versions—No fix listedCNA
SiemensSIMATIC STEP 7 V5.7all versions—No fix listedCNA
SiemensSIMATIC Targetbefore V6.0 SP3V6.0 SP3Patch availableCNA
SiemensSIMATIC WinCC flexible ESall versions—No fix listedCNA
SiemensSIMATIC WinCC Runtime Advancedbefore V17 Update 9V17 Update 9Patch availableCNA
SiemensSIMATIC WinCC Runtime Professionalbefore V21V21Patch availableCNA
SiemensSIMATIC WinCC Runtime Professional V20all versions—No fix listedCNA
SiemensSIMATIC WinCC TeleControlall versions—No fix listedCNA
SiemensSIMATIC WinCC Unified Line Coordinationbefore V20V20Patch availableCNA
SiemensSIMATIC WinCC Unified PC Runtime V18all versions—No fix listedCNA
SiemensSIMATIC WinCC Unified PC Runtime V19all versions—No fix listedCNA
SiemensSIMATIC WinCC Unified PC Runtime V20all versions—No fix listedCNA
SiemensSIMATIC WinCC Unified Sequencebefore V20V20Patch availableCNA
SiemensSIMATIC WinCC V7.5before V7.5 SP2 Update 20V7.5 SP2 Update 20Patch availableCNA
SiemensSIMATIC WinCC V8.0before V8.0 Update 8V8.0 Update 8Patch availableCNA
SiemensSIMATIC WinCC V8.1before V8.1 Update 3V8.1 Update 3Patch availableCNA
SiemensSIMATIC WinCC Visualization Architect (SiVArc) V17before V17 Update 9V17 Update 9Patch availableCNA
SiemensSIMATIC WinCC Visualization Architect (SiVArc) V18all versions—No fix listedCNA
SiemensSIMATIC WinCC Visualization Architect (SiVArc) V19before V19 Update 4V19 Update 4Patch availableCNA
SiemensSIMATIC WinCC Visualization Architect (SiVArc) V20before V20 Update 3V20 Update 3Patch availableCNA
SiemensSIMIT Rapid Testerall versions—No fix listedCNA
SiemensSIMIT Simulation Platformall versions—No fix listedCNA
SiemensSINAMICS Startdrive V17all versions—No fix listedCNA
SiemensSINAMICS Startdrive V18all versions—No fix listedCNA
SiemensSINAMICS Startdrive V19all versions—No fix listedCNA
SiemensSINAMICS Startdrive V20all versions—No fix listedCNA
SiemensSINEC NMSbefore V4.0V4.0Patch availableCNA
SiemensSINEMA Remote Connect Clientall versions—No fix listedCNA
SiemensSITRANSall versions—No fix listedCNA
SiemensStandard PID CTRL Toolall versions—No fix listedCNA
SiemensTeleControl Server Basic V3.1before V3.1.2.2V3.1.2.2Patch availableCNA
SiemensTIA Administratorbefore V3.0.6V3.0.6Patch availableCNA
SiemensTIA Portal Cloud Connectorbefore V2.3V2.3Patch availableCNA
SiemensTIA Portal Test Suite V17all versions—No fix listedCNA
SiemensTIA Portal Test Suite V18all versions—No fix listedCNA
SiemensTIA Portal Test Suite V19before V19 Update 4V19 Update 4Patch availableCNA
SiemensTIA Portal Test Suite V20before V20 Update 3V20 Update 3Patch availableCNA
SiemensTIA Project-Serverbefore V2.2V2.2Patch availableCNA
SiemensTIA Project-Server V17all versions—No fix listedCNA
SiemensTotally Integrated Automation Portal (TIA Portal) V17before V17 Update 9V17 Update 9Patch availableCNA
SiemensTotally Integrated Automation Portal (TIA Portal) V18before V18 Update 6V18 Update 6Patch availableCNA
SiemensTotally Integrated Automation Portal (TIA Portal) V19before V19 Update 4V19 Update 4Patch availableCNA
SiemensTotally Integrated Automation Portal (TIA Portal) V20before V20 Update 4V20 Update 4Patch availableCNA
SiemensWinCC Panel Image Setupbefore V17 Update 9V17 Update 9Patch availableCNA
  • Automation License Manager V6.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • Automation License Manager V6.2 VendorSiemens Affected before V6.2 Upd3 Fixed in V6.2 Upd3 Patch available CNA
  • CEMAT V10.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • CP PtP Param configuring interface VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • Create MyConfig (CMC) VendorSiemens Affected before V6.9 Fixed in V6.9 Patch available CNA
  • Energy Support Library (EnSL) VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • FM Configuration Package VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • Modular PID CTRL Tool VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • MultiFieldbus Configuration Tool (MFCT) VendorSiemens Affected before V1.5.5.0 Fixed in V1.5.5.0 Patch available CNA
  • OpenPCS 7 V10.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • OpenPCS 7 V9.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • Siemens Network Planner (SINETPLAN) VendorSiemens Affected before V2.0 SP2 Fixed in V2.0 SP2 Patch available CNA
  • SIMATIC Automation Tool VendorSiemens Affected before V5.0 SP4 Fixed in V5.0 SP4 Patch available CNA
  • SIMATIC Automation Tool SDK Windows VendorSiemens Affected before V5.0 SP4 Fixed in V5.0 SP4 Patch available CNA
  • SIMATIC BATCH V10.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC BATCH V9.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Control Function Library (CFL) V1.x VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Control Function Library (CFL) V2.x VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Control Function Library (CFL) V3.x VendorSiemens Affected before V3.1.0.2 Fixed in V3.1.0.2 Patch available CNA
  • SIMATIC Control Function Library (CFL) V4.x VendorSiemens Affected before V4.1 Fixed in V4.1 Patch available CNA
  • SIMATIC D7-SYS VendorSiemens Affected before V10.0 SP1 Fixed in V10.0 SP1 Patch available CNA
  • SIMATIC eaSie Core Package VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC eaSie Document Skills VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC eaSie PCS 7 Skill Package VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC eaSie Workflow Skills VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Energy Suite V17 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Energy Suite V18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Energy Suite V19 VendorSiemens Affected before V19 Update 4 Fixed in V19 Update 4 Patch available CNA
  • SIMATIC Logon V1.6 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Logon V2.0 VendorSiemens Affected before V2.0 Upd3 Fixed in V2.0 Upd3 Patch available CNA
  • SIMATIC Management Agent VendorSiemens Affected before V9.1 SP1 Upd8 Fixed in V9.1 SP1 Upd8 Patch available CNA
  • SIMATIC Management Console VendorSiemens Affected before V9.1 SP1 Upd8 Fixed in V9.1 SP1 Upd8 Patch available CNA
  • SIMATIC MTP CREATOR V2.x VendorSiemens Affected before V2.1 Fixed in V2.1 Patch available CNA
  • SIMATIC MTP CREATOR V3.x VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC MTP CREATOR V4.x VendorSiemens Affected before V4.1.0.1 Fixed in V4.1.0.1 Patch available CNA
  • SIMATIC MTP CREATOR V5.x VendorSiemens Affected before V5.0.0.1 Fixed in V5.0.0.1 Patch available CNA
  • SIMATIC MTP Integrator V1.x VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC MTP Integrator V2.x VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V16 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V17 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V19 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V20 VendorSiemens Affected before V20.0 Update 1 Fixed in V20.0 Update 1 Patch available CNA
  • SIMATIC ODK 1500S VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Advanced Process Faceplates V9.1 VendorSiemens Affected before V9.1 SP2 Upd4 Fixed in V9.1 SP2 Upd4 Patch available CNA
  • SIMATIC PCS 7 Advanced Process Functions V2.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Advanced Process Functions V2.2 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Advanced Process Graphics V10.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Advanced Process Graphics V9.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Advanced Process Library V9.1 VendorSiemens Affected before V9.1 SP2 Upd6 Fixed in V9.1 SP2 Upd6 Patch available CNA
  • SIMATIC PCS 7 Basis Faceplates V9.1 VendorSiemens Affected before V9.1 SP2 Upd2 Fixed in V9.1 SP2 Upd2 Patch available CNA
  • SIMATIC PCS 7 Basis Library V10.0 VendorSiemens Affected before V10.0 SP1 Upd2 Fixed in V10.0 SP1 Upd2 Patch available CNA
  • SIMATIC PCS 7 Basis Library V9.1 VendorSiemens Affected before V9.1 SP2 Upd8 Fixed in V9.1 SP2 Upd8 Patch available CNA
  • SIMATIC PCS 7 Industry Library V10.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Industry Library V9.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Industry Library V9.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Logic Matrix V10.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Logic Matrix V9.1 VendorSiemens Affected before V9.1 Upd8 Fixed in V9.1 Upd8 Patch available CNA
  • SIMATIC PCS 7 MPC Configurator VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 PowerControl V9.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Standard Chemical Library V10.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 Standard Chemical Library V9.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 TeleControl V9.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V10.0 VendorSiemens Affected before V10.0 SP1 UC01 Fixed in V10.0 SP1 UC01 Patch available CNA
  • SIMATIC PCS 7 V9.1 VendorSiemens Affected before V9.1 SP1 UC08 Fixed in V9.1 SP1 UC08 Patch available CNA
  • SIMATIC PCS 7/OPEN OS V9.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS neo V5.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PCS neo V6.0 VendorSiemens Affected before V6.0 SP1 Fixed in V6.0 SP1 Patch available CNA
  • SIMATIC PDM Maintenance Station V5.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PDM V9.2 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC PDM V9.3 VendorSiemens Affected before V9.3 SP1 Upd2 Fixed in V9.3 SP1 Upd2 Patch available CNA
  • SIMATIC Process Function Library (PFL) V4.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Process Historian 2020 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Process Historian 2022 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Process Historian 2024 VendorSiemens Affected before V2024 SP1 Upd2 Fixed in V2024 SP1 Upd2 Patch available CNA
  • SIMATIC ProSave V17 VendorSiemens Affected before V17 Update 9 Fixed in V17 Update 9 Patch available CNA
  • SIMATIC ProSave V18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC ProSave V19 VendorSiemens Affected before V19 Update 4 Fixed in V19 Update 4 Patch available CNA
  • SIMATIC ProSave V20 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Route Control V10.0 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Route Control V9.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC S7 F Systems V6.3 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC S7 F Systems V6.4 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC S7-1500 Software Controller V2 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC S7-1500 Software Controller V3 VendorSiemens Affected before V31.1.5 Fixed in V31.1.5 Patch available CNA
  • SIMATIC S7-Fail-safe Configuration Tool (S7-FCT) VendorSiemens Affected before V4.0.1 Fixed in V4.0.1 Patch available CNA
  • SIMATIC S7-PCT VendorSiemens Affected before V3.5 SP4 Update 1 Fixed in V3.5 SP4 Update 1 Patch available CNA
  • SIMATIC S7-PLCSIM Advanced VendorSiemens Affected before V7.0 Update 1 Fixed in V7.0 Update 1 Patch available CNA
  • SIMATIC S7-PLCSIM V17 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC S7-PLCSIM V18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC S7-PLCSIM V19 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC S7-PLCSIM V20 VendorSiemens Affected before V20 Update 1 Fixed in V20 Update 1 Patch available CNA
  • SIMATIC Safety Matrix V6.3 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC STEP 7 CFC V19 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC STEP 7 CFC V20 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC STEP 7 V5.7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Target VendorSiemens Affected before V6.0 SP3 Fixed in V6.0 SP3 Patch available CNA
  • SIMATIC WinCC flexible ES VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC WinCC Runtime Advanced VendorSiemens Affected before V17 Update 9 Fixed in V17 Update 9 Patch available CNA
  • SIMATIC WinCC Runtime Professional VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
  • SIMATIC WinCC Runtime Professional V20 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC WinCC TeleControl VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC WinCC Unified Line Coordination VendorSiemens Affected before V20 Fixed in V20 Patch available CNA
  • SIMATIC WinCC Unified PC Runtime V18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC WinCC Unified PC Runtime V19 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC WinCC Unified PC Runtime V20 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC WinCC Unified Sequence VendorSiemens Affected before V20 Fixed in V20 Patch available CNA
  • SIMATIC WinCC V7.5 VendorSiemens Affected before V7.5 SP2 Update 20 Fixed in V7.5 SP2 Update 20 Patch available CNA
  • SIMATIC WinCC V8.0 VendorSiemens Affected before V8.0 Update 8 Fixed in V8.0 Update 8 Patch available CNA
  • SIMATIC WinCC V8.1 VendorSiemens Affected before V8.1 Update 3 Fixed in V8.1 Update 3 Patch available CNA
  • SIMATIC WinCC Visualization Architect (SiVArc) V17 VendorSiemens Affected before V17 Update 9 Fixed in V17 Update 9 Patch available CNA
  • SIMATIC WinCC Visualization Architect (SiVArc) V18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC WinCC Visualization Architect (SiVArc) V19 VendorSiemens Affected before V19 Update 4 Fixed in V19 Update 4 Patch available CNA
  • SIMATIC WinCC Visualization Architect (SiVArc) V20 VendorSiemens Affected before V20 Update 3 Fixed in V20 Update 3 Patch available CNA
  • SIMIT Rapid Tester VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMIT Simulation Platform VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SINAMICS Startdrive V17 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SINAMICS Startdrive V18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SINAMICS Startdrive V19 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SINAMICS Startdrive V20 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SINEC NMS VendorSiemens Affected before V4.0 Fixed in V4.0 Patch available CNA
  • SINEMA Remote Connect Client VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SITRANS VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • Standard PID CTRL Tool VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • TeleControl Server Basic V3.1 VendorSiemens Affected before V3.1.2.2 Fixed in V3.1.2.2 Patch available CNA
  • TIA Administrator VendorSiemens Affected before V3.0.6 Fixed in V3.0.6 Patch available CNA
  • TIA Portal Cloud Connector VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
  • TIA Portal Test Suite V17 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • TIA Portal Test Suite V18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • TIA Portal Test Suite V19 VendorSiemens Affected before V19 Update 4 Fixed in V19 Update 4 Patch available CNA
  • TIA Portal Test Suite V20 VendorSiemens Affected before V20 Update 3 Fixed in V20 Update 3 Patch available CNA
  • TIA Project-Server VendorSiemens Affected before V2.2 Fixed in V2.2 Patch available CNA
  • TIA Project-Server V17 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • Totally Integrated Automation Portal (TIA Portal) V17 VendorSiemens Affected before V17 Update 9 Fixed in V17 Update 9 Patch available CNA
  • Totally Integrated Automation Portal (TIA Portal) V18 VendorSiemens Affected before V18 Update 6 Fixed in V18 Update 6 Patch available CNA
  • Totally Integrated Automation Portal (TIA Portal) V19 VendorSiemens Affected before V19 Update 4 Fixed in V19 Update 4 Patch available CNA
  • Totally Integrated Automation Portal (TIA Portal) V20 VendorSiemens Affected before V20 Update 4 Fixed in V20 Update 4 Patch available CNA
  • WinCC Panel Image Setup VendorSiemens Affected before V17 Update 9 Fixed in V17 Update 9 Patch available CNA

CPE names Threatist (inferred) · 2

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:a:siemens:tia_administrator:*:*:*:*:*:*:*:*——Siemens
  • cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:a:siemens:tia_administrator:*:*:*:*:*:*:*:* Versions — — ·Siemens

Remediation

  • Fix · CNA Automation License Manager V6.2 (Siemens) Fixed in V6.2 Upd3
  • Fix · CNA Create MyConfig (CMC) (Siemens) Fixed in V6.9
  • Fix · CNA MultiFieldbus Configuration Tool (MFCT) (Siemens) Fixed in V1.5.5.0
  • Fix · CNA Siemens Network Planner (SINETPLAN) (Siemens) Fixed in V2.0 SP2
  • Fix · CNA SIMATIC Automation Tool (Siemens) Fixed in V5.0 SP4
  • Fix · CNA SIMATIC Automation Tool SDK Windows (Siemens) Fixed in V5.0 SP4
  • Fix · CNA SIMATIC Control Function Library (CFL) V3.x (Siemens) Fixed in V3.1.0.2
  • Fix · CNA SIMATIC Control Function Library (CFL) V4.x (Siemens) Fixed in V4.1
  • Fix · CNA SIMATIC D7-SYS (Siemens) Fixed in V10.0 SP1
  • Fix · CNA SIMATIC Energy Suite V19 (Siemens) Fixed in V19 Update 4
  • Fix · CNA SIMATIC Logon V2.0 (Siemens) Fixed in V2.0 Upd3
  • Fix · CNA SIMATIC Management Agent (Siemens) Fixed in V9.1 SP1 Upd8
  • Fix · CNA SIMATIC Management Console (Siemens) Fixed in V9.1 SP1 Upd8
  • Fix · CNA SIMATIC MTP CREATOR V2.x (Siemens) Fixed in V2.1
  • Fix · CNA SIMATIC MTP CREATOR V4.x (Siemens) Fixed in V4.1.0.1
  • Fix · CNA SIMATIC MTP CREATOR V5.x (Siemens) Fixed in V5.0.0.1
  • Fix · CNA SIMATIC NET PC Software V20 (Siemens) Fixed in V20.0 Update 1
  • Fix · CNA SIMATIC PCS 7 Advanced Process Faceplates V9.1 (Siemens) Fixed in V9.1 SP2 Upd4
  • Fix · CNA SIMATIC PCS 7 Advanced Process Library V9.1 (Siemens) Fixed in V9.1 SP2 Upd6
  • Fix · CNA SIMATIC PCS 7 Basis Faceplates V9.1 (Siemens) Fixed in V9.1 SP2 Upd2
  • Fix · CNA SIMATIC PCS 7 Basis Library V10.0 (Siemens) Fixed in V10.0 SP1 Upd2
  • Fix · CNA SIMATIC PCS 7 Basis Library V9.1 (Siemens) Fixed in V9.1 SP2 Upd8
  • Fix · CNA SIMATIC PCS 7 Logic Matrix V9.1 (Siemens) Fixed in V9.1 Upd8
  • Fix · CNA SIMATIC PCS 7 V10.0 (Siemens) Fixed in V10.0 SP1 UC01
  • Fix · CNA SIMATIC PCS 7 V9.1 (Siemens) Fixed in V9.1 SP1 UC08
  • Fix · CNA SIMATIC PCS neo V6.0 (Siemens) Fixed in V6.0 SP1
  • Fix · CNA SIMATIC PDM V9.3 (Siemens) Fixed in V9.3 SP1 Upd2
  • Fix · CNA SIMATIC Process Historian 2024 (Siemens) Fixed in V2024 SP1 Upd2
  • Fix · CNA SIMATIC ProSave V17 (Siemens) Fixed in V17 Update 9
  • Fix · CNA SIMATIC ProSave V19 (Siemens) Fixed in V19 Update 4
  • Fix · CNA SIMATIC S7-1500 Software Controller V3 (Siemens) Fixed in V31.1.5
  • Fix · CNA SIMATIC S7-Fail-safe Configuration Tool (S7-FCT) (Siemens) Fixed in V4.0.1
  • Fix · CNA SIMATIC S7-PCT (Siemens) Fixed in V3.5 SP4 Update 1
  • Fix · CNA SIMATIC S7-PLCSIM Advanced (Siemens) Fixed in V7.0 Update 1
  • Fix · CNA SIMATIC S7-PLCSIM V20 (Siemens) Fixed in V20 Update 1
  • Fix · CNA SIMATIC Target (Siemens) Fixed in V6.0 SP3
  • Fix · CNA SIMATIC WinCC Runtime Advanced (Siemens) Fixed in V17 Update 9
  • Fix · CNA SIMATIC WinCC Runtime Professional (Siemens) Fixed in V21
  • Fix · CNA SIMATIC WinCC Unified Line Coordination (Siemens) Fixed in V20
  • Fix · CNA SIMATIC WinCC Unified Sequence (Siemens) Fixed in V20
  • Fix · CNA SIMATIC WinCC V7.5 (Siemens) Fixed in V7.5 SP2 Update 20
  • Fix · CNA SIMATIC WinCC V8.0 (Siemens) Fixed in V8.0 Update 8
  • Fix · CNA SIMATIC WinCC V8.1 (Siemens) Fixed in V8.1 Update 3
  • Fix · CNA SIMATIC WinCC Visualization Architect (SiVArc) V17 (Siemens) Fixed in V17 Update 9
  • Fix · CNA SIMATIC WinCC Visualization Architect (SiVArc) V19 (Siemens) Fixed in V19 Update 4
  • Fix · CNA SIMATIC WinCC Visualization Architect (SiVArc) V20 (Siemens) Fixed in V20 Update 3
  • Fix · CNA SINEC NMS (Siemens) Fixed in V4.0
  • Fix · CNA TeleControl Server Basic V3.1 (Siemens) Fixed in V3.1.2.2
  • Fix · CNA TIA Administrator (Siemens) Fixed in V3.0.6
  • Fix · CNA TIA Portal Cloud Connector (Siemens) Fixed in V2.3
  • Fix · CNA TIA Portal Test Suite V19 (Siemens) Fixed in V19 Update 4
  • Fix · CNA TIA Portal Test Suite V20 (Siemens) Fixed in V20 Update 3
  • Fix · CNA TIA Project-Server (Siemens) Fixed in V2.2
  • Fix · CNA Totally Integrated Automation Portal (TIA Portal) V17 (Siemens) Fixed in V17 Update 9
  • Fix · CNA Totally Integrated Automation Portal (TIA Portal) V18 (Siemens) Fixed in V18 Update 6
  • Fix · CNA Totally Integrated Automation Portal (TIA Portal) V19 (Siemens) Fixed in V19 Update 4
  • Fix · CNA Totally Integrated Automation Portal (TIA Portal) V20 (Siemens) Fixed in V20 Update 4
  • Fix · CNA WinCC Panel Image Setup (Siemens) Fixed in V17 Update 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-30033
  2. 2026-10-03 Alias added: GHSA-wc4j-qqmp-4vc4
  3. 2026-10-13 Affected versions changed · CNA

References

Other 1

  • TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
See all 2487 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences