CVE-2025-30033

State
Published
Severity
8.5 High
Published
Aug 12, 2025
Updated
Oct 13, 2026
Reserved
Mar 14, 2025

Read the record on cve.org

Description

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

Scores

CVSSScoreVectorSource
4.08.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsiemens
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsiemens

Weaknesses

  • CWE-427 Uncontrolled Search Path Element

Affected Products

ProductVersions
Automation License Manager V6.0Siemens
  • all versionsAffected
Automation License Manager V6.2Siemens
  • before V6.2 Upd3Affected
CEMAT V10.0Siemens
  • all versionsAffected
CP PtP Param configuring interfaceSiemens
  • all versionsAffected
Create MyConfig (CMC)Siemens
  • before V6.9Affected
Energy Support Library (EnSL)Siemens
  • all versionsAffected
FM Configuration PackageSiemens
  • all versionsAffected
Modular PID CTRL ToolSiemens
  • all versionsAffected
MultiFieldbus Configuration Tool (MFCT)Siemens
  • before V1.5.5.0Affected
OpenPCS 7 V10.0Siemens
  • all versionsAffected
OpenPCS 7 V9.1Siemens
  • all versionsAffected
Siemens Network Planner (SINETPLAN)Siemens
  • before V2.0 SP2Affected
SIMATIC Automation ToolSiemens
  • before V5.0 SP4Affected
SIMATIC Automation Tool SDK WindowsSiemens
  • before V5.0 SP4Affected
SIMATIC BATCH V10.0Siemens
  • all versionsAffected
SIMATIC BATCH V9.1Siemens
  • all versionsAffected
SIMATIC Control Function Library (CFL) V1.xSiemens
  • all versionsAffected
SIMATIC Control Function Library (CFL) V2.xSiemens
  • all versionsAffected
SIMATIC Control Function Library (CFL) V3.xSiemens
  • before V3.1.0.2Affected
SIMATIC Control Function Library (CFL) V4.xSiemens
  • before V4.1Affected
SIMATIC D7-SYSSiemens
  • before V10.0 SP1Affected
SIMATIC eaSie Core PackageSiemens
  • all versionsAffected
SIMATIC eaSie Document SkillsSiemens
  • all versionsAffected
SIMATIC eaSie PCS 7 Skill PackageSiemens
  • all versionsAffected
SIMATIC eaSie Workflow SkillsSiemens
  • all versionsAffected
SIMATIC Energy Suite V17Siemens
  • all versionsAffected
SIMATIC Energy Suite V18Siemens
  • all versionsAffected
SIMATIC Energy Suite V19Siemens
  • before V19 Update 4Affected
SIMATIC Logon V1.6Siemens
  • all versionsAffected
SIMATIC Logon V2.0Siemens
  • before V2.0 Upd3Affected
SIMATIC Management AgentSiemens
  • before V9.1 SP1 Upd8Affected
SIMATIC Management ConsoleSiemens
  • before V9.1 SP1 Upd8Affected
SIMATIC MTP CREATOR V2.xSiemens
  • before V2.1Affected
SIMATIC MTP CREATOR V3.xSiemens
  • all versionsAffected
SIMATIC MTP CREATOR V4.xSiemens
  • before V4.1.0.1Affected
SIMATIC MTP CREATOR V5.xSiemens
  • before V5.0.0.1Affected
SIMATIC MTP Integrator V1.xSiemens
  • all versionsAffected
SIMATIC MTP Integrator V2.xSiemens
  • all versionsAffected
SIMATIC NET PC Software V16Siemens
  • all versionsAffected
SIMATIC NET PC Software V17Siemens
  • all versionsAffected
SIMATIC NET PC Software V18Siemens
  • all versionsAffected
SIMATIC NET PC Software V19Siemens
  • all versionsAffected
SIMATIC NET PC Software V20Siemens
  • before V20.0 Update 1Affected
SIMATIC ODK 1500SSiemens
  • all versionsAffected
SIMATIC PCS 7 Advanced Process Faceplates V9.1Siemens
  • before V9.1 SP2 Upd4Affected
SIMATIC PCS 7 Advanced Process Functions V2.1Siemens
  • all versionsAffected
SIMATIC PCS 7 Advanced Process Functions V2.2Siemens
  • all versionsAffected
SIMATIC PCS 7 Advanced Process Graphics V10.0Siemens
  • all versionsAffected
SIMATIC PCS 7 Advanced Process Graphics V9.1Siemens
  • all versionsAffected
SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0Siemens
  • all versionsAffected
SIMATIC PCS 7 Advanced Process Library V9.1Siemens
  • before V9.1 SP2 Upd6Affected
SIMATIC PCS 7 Basis Faceplates V9.1Siemens
  • before V9.1 SP2 Upd2Affected
SIMATIC PCS 7 Basis Library V10.0Siemens
  • before V10.0 SP1 Upd2Affected
SIMATIC PCS 7 Basis Library V9.1Siemens
  • before V9.1 SP2 Upd8Affected
SIMATIC PCS 7 Industry Library V10.0Siemens
  • all versionsAffected
SIMATIC PCS 7 Industry Library V9.0Siemens
  • all versionsAffected
SIMATIC PCS 7 Industry Library V9.1Siemens
  • all versionsAffected
SIMATIC PCS 7 Logic Matrix V10.0Siemens
  • all versionsAffected
SIMATIC PCS 7 Logic Matrix V9.1Siemens
  • before V9.1 Upd8Affected
SIMATIC PCS 7 MPC ConfiguratorSiemens
  • all versionsAffected
SIMATIC PCS 7 PowerControl V9.1Siemens
  • all versionsAffected
SIMATIC PCS 7 Standard Chemical Library V10.0Siemens
  • all versionsAffected
SIMATIC PCS 7 Standard Chemical Library V9.1Siemens
  • all versionsAffected
SIMATIC PCS 7 TeleControl V9.1Siemens
  • all versionsAffected
SIMATIC PCS 7 V10.0Siemens
  • before V10.0 SP1 UC01Affected
SIMATIC PCS 7 V9.1Siemens
  • before V9.1 SP1 UC08Affected
SIMATIC PCS 7/OPEN OS V9.1Siemens
  • all versionsAffected
SIMATIC PCS neo V5.0Siemens
  • all versionsAffected
SIMATIC PCS neo V6.0Siemens
  • before V6.0 SP1Affected
SIMATIC PDM Maintenance Station V5.0Siemens
  • all versionsAffected
SIMATIC PDM V9.2Siemens
  • all versionsAffected
SIMATIC PDM V9.3Siemens
  • before V9.3 SP1 Upd2Affected
SIMATIC Process Function Library (PFL) V4.0Siemens
  • all versionsAffected
SIMATIC Process Historian 2020Siemens
  • all versionsAffected
SIMATIC Process Historian 2022Siemens
  • all versionsAffected
SIMATIC Process Historian 2024Siemens
  • before V2024 SP1 Upd2Affected
SIMATIC ProSave V17Siemens
  • before V17 Update 9Affected
SIMATIC ProSave V18Siemens
  • all versionsAffected
SIMATIC ProSave V19Siemens
  • before V19 Update 4Affected
SIMATIC ProSave V20Siemens
  • all versionsAffected
SIMATIC Route Control V10.0Siemens
  • all versionsAffected
SIMATIC Route Control V9.1Siemens
  • all versionsAffected
SIMATIC S7 F Systems V6.3Siemens
  • all versionsAffected
SIMATIC S7 F Systems V6.4Siemens
  • all versionsAffected
SIMATIC S7-1500 Software Controller V2Siemens
  • all versionsAffected
SIMATIC S7-1500 Software Controller V3Siemens
  • before V31.1.5Affected
SIMATIC S7-Fail-safe Configuration Tool (S7-FCT)Siemens
  • before V4.0.1Affected
SIMATIC S7-PCTSiemens
  • before V3.5 SP4 Update 1Affected
SIMATIC S7-PLCSIM AdvancedSiemens
  • before V7.0 Update 1Affected
SIMATIC S7-PLCSIM V17Siemens
  • all versionsAffected
SIMATIC S7-PLCSIM V18Siemens
  • all versionsAffected
SIMATIC S7-PLCSIM V19Siemens
  • all versionsAffected
SIMATIC S7-PLCSIM V20Siemens
  • before V20 Update 1Affected
SIMATIC Safety Matrix V6.3Siemens
  • all versionsAffected
SIMATIC STEP 7 CFC V19Siemens
  • all versionsAffected
SIMATIC STEP 7 CFC V20Siemens
  • all versionsAffected
SIMATIC STEP 7 V5.7Siemens
  • all versionsAffected
SIMATIC TargetSiemens
  • before V6.0 SP3Affected
SIMATIC WinCC flexible ESSiemens
  • all versionsAffected
SIMATIC WinCC Runtime AdvancedSiemens
  • before V17 Update 9Affected
SIMATIC WinCC Runtime ProfessionalSiemens
  • before V21Affected
SIMATIC WinCC Runtime Professional V20Siemens
  • all versionsAffected
SIMATIC WinCC TeleControlSiemens
  • all versionsAffected
SIMATIC WinCC Unified Line CoordinationSiemens
  • before V20Affected
SIMATIC WinCC Unified PC Runtime V18Siemens
  • all versionsAffected
SIMATIC WinCC Unified PC Runtime V19Siemens
  • all versionsAffected
SIMATIC WinCC Unified PC Runtime V20Siemens
  • all versionsAffected
SIMATIC WinCC Unified SequenceSiemens
  • before V20Affected
SIMATIC WinCC V7.5Siemens
  • before V7.5 SP2 Update 20Affected
SIMATIC WinCC V8.0Siemens
  • before V8.0 Update 8Affected
SIMATIC WinCC V8.1Siemens
  • before V8.1 Update 3Affected
SIMATIC WinCC Visualization Architect (SiVArc) V17Siemens
  • before V17 Update 9Affected
SIMATIC WinCC Visualization Architect (SiVArc) V18Siemens
  • all versionsAffected
SIMATIC WinCC Visualization Architect (SiVArc) V19Siemens
  • before V19 Update 4Affected
SIMATIC WinCC Visualization Architect (SiVArc) V20Siemens
  • before V20 Update 3Affected
SIMIT Rapid TesterSiemens
  • all versionsAffected
SIMIT Simulation PlatformSiemens
  • all versionsAffected
SINAMICS Startdrive V17Siemens
  • all versionsAffected
SINAMICS Startdrive V18Siemens
  • all versionsAffected
SINAMICS Startdrive V19Siemens
  • all versionsAffected
SINAMICS Startdrive V20Siemens
  • all versionsAffected
SINEC NMSSiemens
  • before V4.0Affected
SINEMA Remote Connect ClientSiemens
  • all versionsAffected
SITRANSSiemens
  • all versionsAffected
Standard PID CTRL ToolSiemens
  • all versionsAffected
TeleControl Server Basic V3.1Siemens
  • before V3.1.2.2Affected
TIA AdministratorSiemens
  • before V3.0.6Affected
TIA Portal Cloud ConnectorSiemens
  • before V2.3Affected
TIA Portal Test Suite V17Siemens
  • all versionsAffected
TIA Portal Test Suite V18Siemens
  • all versionsAffected
TIA Portal Test Suite V19Siemens
  • before V19 Update 4Affected
TIA Portal Test Suite V20Siemens
  • before V20 Update 3Affected
TIA Project-ServerSiemens
  • before V2.2Affected
TIA Project-Server V17Siemens
  • all versionsAffected
Totally Integrated Automation Portal (TIA Portal) V17Siemens
  • before V17 Update 9Affected
Totally Integrated Automation Portal (TIA Portal) V18Siemens
  • before V18 Update 6Affected
Totally Integrated Automation Portal (TIA Portal) V19Siemens
  • before V19 Update 4Affected
Totally Integrated Automation Portal (TIA Portal) V20Siemens
  • before V20 Update 4Affected
WinCC Panel Image SetupSiemens
  • before V17 Update 9Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.