Read the docs
TI-2025-30263 Aliases CVE-2025-47809GHSA-2rfr-r5fg-2857

Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after…

Priority LOW 37CWE-272Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00179 7th percentileScored 2026-11-07
Fix Fixed CodeMeter (Wibu): 8.30a

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
WibuCodeMeterbefore 8.30a8.30aPatch availableCNA
  • CodeMeter VendorWibu Affected before 8.30a Fixed in 8.30a Patch available CNA

Remediation

  • Fix · CNA CodeMeter (Wibu) Fixed in 8.30a

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-47809
  2. 2026-10-03 Alias added: GHSA-2rfr-r5fg-2857

References

Other 1

  • TI-2021-22426 WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path CVSS 4.0HIGH 8.5
  • TI-2020-19152 CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path CVSS 4.0HIGH 8.5
  • TI-2018-02959 An exploitable heap overflow vulnerability exists in the WkbProgramLow function of… CVSS 3.0CRITICAL 10.0
  • TI-2021-03396 Out-of-bounds read in Wibu-Systems CodeMeter CVSS 3.1CRITICAL 9.1
  • TI-2023-03657 Wibu: Buffer Overflow in CodeMeter Runtime CVSS 3.1CRITICAL 9.8
  • TI-2020-11360 Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to… CVSS 3.1CRITICAL 9.8
See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences