CVE-2025-30033

HighCVSS 7.8/10Last modified Nov 10, 2026

Description

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

VendorProductVersions
SiemensAutomation License Manager V6.0< *
SiemensAutomation License Manager V6.2< V6.2 Upd3
SiemensCEMAT V10.0< *
SiemensCP PtP Param configuring interface< *
SiemensCreate MyConfig (CMC)< V6.9
SiemensEnergy Support Library (EnSL)< *
SiemensFM Configuration Package< *
SiemensModular PID CTRL Tool< *
SiemensMultiFieldbus Configuration Tool (MFCT)< V1.5.5.0
SiemensOpenPCS 7 V10.0< *
SiemensOpenPCS 7 V9.1< *
SiemensSiemens Network Planner (SINETPLAN)< V2.0 SP2
SiemensSIMATIC Automation Tool< V5.0 SP4
SiemensSIMATIC Automation Tool SDK Windows< V5.0 SP4
SiemensSIMATIC BATCH V10.0< *
SiemensSIMATIC BATCH V9.1< *
SiemensSIMATIC Control Function Library (CFL) V1.x< *
SiemensSIMATIC Control Function Library (CFL) V2.x< *
SiemensSIMATIC Control Function Library (CFL) V3.x< V3.1.0.2
SiemensSIMATIC Control Function Library (CFL) V4.x< V4.1
SiemensSIMATIC D7-SYS< V10.0 SP1
SiemensSIMATIC eaSie Core Package (6DL5424-0AX00-0AV8)< *
SiemensSIMATIC eaSie Document Skills V26< *
SiemensSIMATIC eaSie PCS 7 Skill Package V26 (6DL5424-0BX00-0AV8)< *
SiemensSIMATIC eaSie Workflow Skills V26< *
SiemensSIMATIC Energy Suite V17< *
SiemensSIMATIC Energy Suite V18< *
SiemensSIMATIC Energy Suite V19< V19 Update 4
SiemensSIMATIC Logon V1.6< *
SiemensSIMATIC Logon V2.0< V2.0 Upd3
SiemensSIMATIC Management Agent< V9.1 SP1 Upd8
SiemensSIMATIC Management Console< V9.1 SP1 Upd8
SiemensSIMATIC MTP CREATOR V2.x< V2.1
SiemensSIMATIC MTP CREATOR V3.x< *
SiemensSIMATIC MTP CREATOR V4.x< V4.1.0.1
SiemensSIMATIC MTP CREATOR V5.x< V5.0.0.1
SiemensSIMATIC MTP Integrator V1.x< *
SiemensSIMATIC MTP Integrator V2.x< *
SiemensSIMATIC NET PC Software V16< *
SiemensSIMATIC NET PC Software V17< *
SiemensSIMATIC NET PC Software V18< *
SiemensSIMATIC NET PC Software V19< *
SiemensSIMATIC NET PC Software V20< V20.0 Update 1
SiemensSIMATIC ODK 1500S< *
SiemensSIMATIC PCS 7 Advanced Process Faceplates V9.1< V9.1 SP2 Upd4
SiemensSIMATIC PCS 7 Advanced Process Functions V2.1< *
SiemensSIMATIC PCS 7 Advanced Process Functions V2.2< *
SiemensSIMATIC PCS 7 Advanced Process Graphics V10.0< *
SiemensSIMATIC PCS 7 Advanced Process Graphics V9.1< *
SiemensSIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0< *

References

Timeline

Published
Aug 12, 2025
Last modified
Nov 10, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-300345.5A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3). Affected devices do not properly validate input CVE-2025-300359.0The vulnerability enables an attacker to fully bypass authentication in CGM CLININET and gain access to any active user account by supplyingCVE-2025-300368.8Stored XSS vulnerability exists in the "Oddział" (Ward) module, in the death diagnosis description field, and allows the execution of arbitrCVE-2025-300378.8The system exposes several endpoints, typically including "/int/" in their path, that should be restricted to internal services, but are insCVE-2025-300387.3The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-iCVE-2025-300399.0Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the systCVE-2025-30045.4A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknoCVE-2025-300409.0The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prCVE-2025-300419.0The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogsCVE-2025-300427.8The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client device, and, in realiCVE-2025-300437.1CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without autCVE-2025-300449.4In the endpoints "/cgi-bin/CliniNET.prd/utils/usrlogstat_simple.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", "/cgi-bin/CliniNET.prd/uti