7.8
High
CVE-2025-30033 The affected setup component is vulnerable to DLL hijacking
Description
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Automation License Manager V6.0 | Versions not published | |
| Automation License Manager V6.2 | Versions not published | |
| CEMAT V10.0 | Versions not published | |
| CP PtP Param configuring interface | Versions not published | |
| Create MyConfig (CMC) 6.9 | earliest → < 6.9 | 6.9 |
| Energy Support Library (EnSL) | Versions not published | |
| FM Configuration Package | Versions not published | |
| Modular PID CTRL Tool | Versions not published | |
| MultiFieldbus Configuration Tool (MFCT) 1.5 | earliest → < 1.5.5.0 | 1.5.5.0 |
Show the 133 other branches Hide the 133 other branches
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified