CVE-2025-30033

Summary

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

Affected Software

VendorProductVersion RangeStatus
SiemensAutomation License Manager V6.00 < *affected
SiemensAutomation License Manager V6.20 < V6.2 Upd3affected
SiemensCEMAT V10.00 < *affected
SiemensCP PtP Param configuring interface0 < *affected
SiemensCreate MyConfig (CMC)0 < V6.9affected
SiemensEnergy Support Library (EnSL)0 < *affected
SiemensFM Configuration Package0 < *affected
SiemensModular PID CTRL Tool0 < *affected
SiemensMultiFieldbus Configuration Tool (MFCT)0 < V1.5.5.0affected
SiemensOpenPCS 7 V10.00 < *affected
SiemensOpenPCS 7 V9.10 < *affected
SiemensSiemens Network Planner (SINETPLAN)0 < *affected
SiemensSIMATIC Automation Tool0 < *affected
SiemensSIMATIC Automation Tool SDK Windows0 < *affected
SiemensSIMATIC BATCH V10.00 < *affected
SiemensSIMATIC BATCH V9.10 < *affected
SiemensSIMATIC Control Function Library (CFL) V1.x0 < *affected
SiemensSIMATIC Control Function Library (CFL) V2.x0 < *affected
SiemensSIMATIC Control Function Library (CFL) V3.x0 < V3.1.0.2affected
SiemensSIMATIC Control Function Library (CFL) V4.x0 < V4.1affected
SiemensSIMATIC D7-SYS0 < *affected
SiemensSIMATIC eaSie Core Package0 < *affected
SiemensSIMATIC eaSie Document Skills0 < *affected
SiemensSIMATIC eaSie PCS 7 Skill Package0 < *affected
SiemensSIMATIC eaSie Workflow Skills0 < *affected
SiemensSIMATIC Energy Suite V170 < *affected
SiemensSIMATIC Energy Suite V180 < *affected
SiemensSIMATIC Energy Suite V190 < V19 Update 4affected
SiemensSIMATIC Logon V1.60 < *affected
SiemensSIMATIC Logon V2.00 < V2.0 Upd3affected
SiemensSIMATIC Management Agent0 < V9.1 SP1 Upd8affected
SiemensSIMATIC Management Console0 < V9.1 SP1 Upd8affected
SiemensSIMATIC MTP CREATOR V2.x0 < V2.1affected
SiemensSIMATIC MTP CREATOR V3.x0 < *affected
SiemensSIMATIC MTP CREATOR V4.x0 < V4.1.0.1affected
SiemensSIMATIC MTP CREATOR V5.x0 < V5.0.0.1affected
SiemensSIMATIC MTP Integrator V1.x0 < *affected
SiemensSIMATIC MTP Integrator V2.x0 < *affected
SiemensSIMATIC NET PC Software V160 < *affected
SiemensSIMATIC NET PC Software V170 < *affected
SiemensSIMATIC NET PC Software V180 < *affected
SiemensSIMATIC NET PC Software V190 < *affected
SiemensSIMATIC NET PC Software V200 < V20.0 Update 1affected
SiemensSIMATIC ODK 1500S0 < *affected
SiemensSIMATIC PCS 7 Advanced Process Faceplates V9.10 < V9.1 SP2 Upd4affected
SiemensSIMATIC PCS 7 Advanced Process Functions V2.10 < *affected
SiemensSIMATIC PCS 7 Advanced Process Functions V2.20 < *affected
SiemensSIMATIC PCS 7 Advanced Process Graphics V10.00 < *affected
SiemensSIMATIC PCS 7 Advanced Process Graphics V9.10 < *affected
SiemensSIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.00 < *affected
SiemensSIMATIC PCS 7 Advanced Process Library V9.10 < V9.1 SP2 Upd6affected
SiemensSIMATIC PCS 7 Basis Faceplates V9.10 < V9.1 SP2 Upd2affected
SiemensSIMATIC PCS 7 Basis Library V10.00 < V10.0 SP1 Upd2affected
SiemensSIMATIC PCS 7 Basis Library V9.10 < V9.1 SP2 Upd8affected
SiemensSIMATIC PCS 7 Industry Library V10.00 < *affected
SiemensSIMATIC PCS 7 Industry Library V9.00 < *affected
SiemensSIMATIC PCS 7 Industry Library V9.10 < *affected
SiemensSIMATIC PCS 7 Logic Matrix V10.00 < *affected
SiemensSIMATIC PCS 7 Logic Matrix V9.10 < V9.1 Upd8affected
SiemensSIMATIC PCS 7 MPC Configurator0 < *affected
SiemensSIMATIC PCS 7 PowerControl0 < *affected
SiemensSIMATIC PCS 7 Standard Chemical Library V10.00 < *affected
SiemensSIMATIC PCS 7 Standard Chemical Library V9.10 < *affected
SiemensSIMATIC PCS 7 TeleControl0 < *affected
SiemensSIMATIC PCS 7 V10.00 < V10.0 SP1 UC01affected
SiemensSIMATIC PCS 7 V9.10 < V9.1 SP1 UC08affected
SiemensSIMATIC PCS 7/OPEN OS V9.10 < *affected
SiemensSIMATIC PCS neo V5.00 < *affected
SiemensSIMATIC PCS neo V6.00 < V6.0 SP1affected
SiemensSIMATIC PDM Maintenance Station V5.00 < *affected
SiemensSIMATIC PDM V9.20 < *affected
SiemensSIMATIC PDM V9.30 < V9.3 SP1 Upd2affected
SiemensSIMATIC Process Function Library (PFL) V4.00 < *affected
SiemensSIMATIC Process Historian 20200 < *affected
SiemensSIMATIC Process Historian 20220 < *affected
SiemensSIMATIC Process Historian 20240 < V2024 SP1 Upd2affected
SiemensSIMATIC ProSave V170 < V17 Update 9affected
SiemensSIMATIC ProSave V180 < *affected
SiemensSIMATIC ProSave V190 < V19 Update 4affected
SiemensSIMATIC ProSave V200 < *affected
SiemensSIMATIC Route Control V10.00 < *affected
SiemensSIMATIC Route Control V9.10 < *affected
SiemensSIMATIC S7 F Systems V6.30 < *affected
SiemensSIMATIC S7 F Systems V6.40 < *affected
SiemensSIMATIC S7-1500 Software Controller V20 < *affected
SiemensSIMATIC S7-1500 Software Controller V30 < V31.1.5affected
SiemensSIMATIC S7-Fail-safe Configuration Tool (S7-FCT)0 < V4.0.1affected
SiemensSIMATIC S7-PCT0 < V3.5 SP4 Update 1affected
SiemensSIMATIC S7-PLCSIM Advanced0 < V7.0 Update 1affected
SiemensSIMATIC S7-PLCSIM V170 < *affected
SiemensSIMATIC S7-PLCSIM V180 < *affected
SiemensSIMATIC S7-PLCSIM V190 < *affected
SiemensSIMATIC S7-PLCSIM V200 < V20 Update 1affected
SiemensSIMATIC Safety Matrix0 < *affected
SiemensSIMATIC STEP 7 CFC V190 < *affected
SiemensSIMATIC STEP 7 CFC V200 < *affected
SiemensSIMATIC STEP 7 V5.70 < *affected
SiemensSIMATIC Target0 < V6.0 SP3affected
SiemensSIMATIC WinCC flexible ES0 < *affected
SiemensSIMATIC WinCC Runtime Advanced0 < V17 Update 9affected
SiemensSIMATIC WinCC Runtime Professional0 < V21affected
SiemensSIMATIC WinCC Runtime Professional V200 < *affected
SiemensSIMATIC WinCC TeleControl0 < *affected
SiemensSIMATIC WinCC Unified Line Coordination0 < V20affected
SiemensSIMATIC WinCC Unified PC Runtime V180 < *affected
SiemensSIMATIC WinCC Unified PC Runtime V190 < *affected
SiemensSIMATIC WinCC Unified PC Runtime V200 < *affected
SiemensSIMATIC WinCC Unified Sequence0 < V20affected
SiemensSIMATIC WinCC V7.50 < V7.5 SP2 Update 20affected
SiemensSIMATIC WinCC V8.00 < V8.0 Update 8affected
SiemensSIMATIC WinCC V8.10 < V8.1 Update 3affected
SiemensSIMATIC WinCC Visualization Architect (SiVArc) V170 < V17 Update 9affected
SiemensSIMATIC WinCC Visualization Architect (SiVArc) V180 < *affected
SiemensSIMATIC WinCC Visualization Architect (SiVArc) V190 < V19 Update 4affected
SiemensSIMATIC WinCC Visualization Architect (SiVArc) V200 < V20 Update 3affected
SiemensSIMIT Rapid Tester0 < *affected
SiemensSIMIT Simulation Platform0 < *affected
SiemensSINAMICS Startdrive V170 < *affected
SiemensSINAMICS Startdrive V180 < *affected
SiemensSINAMICS Startdrive V190 < *affected
SiemensSINAMICS Startdrive V200 < *affected
SiemensSINEC NMS0 < V4.0affected
SiemensSINEMA Remote Connect Client0 < *affected
SiemensSITRANS0 < *affected
SiemensStandard PID CTRL Tool0 < *affected
SiemensTeleControl Server Basic V3.10 < V3.1.2.2affected
SiemensTIA Administrator0 < V3.0.6affected
SiemensTIA Portal Cloud Connector0 < V2.3affected
SiemensTIA Portal Test Suite V170 < *affected
SiemensTIA Portal Test Suite V180 < *affected
SiemensTIA Portal Test Suite V190 < V19 Update 4affected
SiemensTIA Portal Test Suite V200 < V20 Update 3affected
SiemensTIA Project-Server0 < V2.2affected
SiemensTIA Project-Server V170 < *affected
SiemensTotally Integrated Automation Portal (TIA Portal) V170 < V17 Update 9affected
SiemensTotally Integrated Automation Portal (TIA Portal) V180 < *affected
SiemensTotally Integrated Automation Portal (TIA Portal) V190 < V19 Update 4affected
SiemensTotally Integrated Automation Portal (TIA Portal) V200 < V20 Update 4affected
SiemensWinCC Panel Image Setup0 < V17 Update 9affected

Weaknesses

  • CWE-427: CWE-427: Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References