CVE-2025-30033
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to...
8.5 High
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Passive
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.22%Up 0.2 points since Aug 12, 2025
What each source reports
CVE List Score used
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
- Record
CVE-2025-30033- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-427
- Updated
- 2026-11-02
EUVDEUVD-2025-24250
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
- Record
EUVD-2025-24250- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wc4j-qqmp-4vc4
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to...
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
- Record
GHSA-wc4j-qqmp-4vc4- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-427
- Updated
- 2026-11-02
NVD
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
- Record
CVE-2025-30033- CVSS 4.0
- 8.5 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-427
- Updated
- 2026-11-02
Affected products
- siemens automation license manager v6.0
- siemens automation license manager v6.2
- siemens cemat v10.0
- siemens cp ptp param configuring interface
- siemens create myconfig (cmc)
- siemens energy support library (ensl)
- siemens fm configuration package
- siemens modular pid ctrl tool
- siemens multifieldbus configuration tool (mfct)
- siemens openpcs 7 v10.0
- siemens openpcs 7 v9.1
- siemens network planner (sinetplan)
Show 127 moreShow less
- siemens simatic automation tool
- siemens simatic automation tool sdk windows
- siemens simatic batch v10.0
- siemens simatic batch v9.1
- siemens simatic control function library (cfl) v1.x
- siemens simatic control function library (cfl) v2.x
- siemens simatic control function library (cfl) v3.x
- siemens simatic control function library (cfl) v4.x
- siemens simatic easie core package
- siemens simatic easie document skills
- siemens simatic easie pcs 7 skill package
- siemens simatic easie workflow skills
- siemens simatic energy suite v17
- siemens simatic energy suite v18
- siemens simatic energy suite v19
- siemens simatic logon v1.6
- siemens simatic logon v2.0
- siemens simatic management agent
- siemens simatic management console
- siemens simatic mtp creator v3.x
- siemens simatic mtp creator v4.x
- siemens simatic mtp creator v2.x
- siemens simatic mtp creator v5.x
- siemens simatic mtp integrator v1.x
- siemens simatic mtp integrator v2.x
- siemens simatic net pc software v16
- siemens simatic net pc software v17
- siemens simatic net pc software v18
- siemens simatic net pc software v19
- siemens simatic net pc software v20
- siemens simatic odk 1500s
- siemens simatic pcs 7 advanced process faceplates v9.1
- siemens simatic pcs 7 advanced process functions v2.1
- siemens simatic pcs 7 advanced process functions v2.2
- siemens simatic pcs 7 advanced process graphics v10.0
- siemens simatic pcs 7 advanced process graphics v9.1
- siemens simatic pcs 7 advanced process library incl. faceplates v10.0
- siemens simatic pcs 7 advanced process library v9.1
- siemens simatic pcs 7 basis faceplates v9.1
- siemens simatic pcs 7 basis library v10.0
- siemens simatic pcs 7 basis library v9.1
- siemens simatic pcs 7 industry library v10.0
- siemens simatic pcs 7 industry library v9.0
- siemens simatic pcs 7 industry library v9.1
- siemens simatic pcs 7 logic matrix v10.0
- siemens simatic pcs 7 logic matrix v9.1
- siemens simatic pcs 7 mpc configurator
- siemens simatic pcs 7 powercontrol v9.1
- siemens simatic pcs 7 standard chemical library v10.0
- siemens simatic pcs 7 standard chemical library v9.1
- siemens simatic pcs 7 telecontrol v9.1
- siemens simatic pcs 7 v10.0
- siemens simatic pcs 7 v9.1
- siemens simatic pcs 7/open os v9.1
- siemens simatic pcs neo v5.0
- siemens simatic pcs neo v6.0
- siemens simatic pdm maintenance station v5.0
- siemens simatic pdm v9.2
- siemens simatic pdm v9.3
- siemens simatic process function library (pfl) v4.0
- siemens simatic process historian 2020
- siemens simatic process historian 2022
- siemens simatic process historian 2024
- siemens simatic prosave v17
- siemens simatic prosave v18
- siemens simatic prosave v19
- siemens simatic prosave v20
- siemens simatic route control v10.0
- siemens simatic route control v9.1
- siemens simatic s7 f systems v6.3
- siemens simatic s7 f systems v6.4
- siemens simatic s7-1500 software controller v2
- siemens simatic s7-1500 software controller v3
- siemens simatic s7-fail-safe configuration tool (s7-fct)
- siemens simatic s7-pct
- siemens simatic s7-plcsim advanced
- siemens simatic s7-plcsim v17
- siemens simatic s7-plcsim v18
- siemens simatic s7-plcsim v19
- siemens simatic s7-plcsim v20
- siemens simatic safety matrix v6.3
- siemens simatic step 7 cfc v19
- siemens simatic step 7 cfc v20
- siemens simatic step 7 v5.7
- siemens simatic target
- siemens simatic wincc flexible es
- siemens simatic wincc runtime advanced
- siemens simatic wincc runtime professional
- siemens simatic wincc runtime professional v20
- siemens simatic wincc telecontrol
- siemens simatic wincc unified line coordination
- siemens simatic wincc unified pc runtime v18
- siemens simatic wincc unified pc runtime v19
- siemens simatic wincc unified pc runtime v20
- siemens simatic wincc unified sequence
- siemens simatic wincc v7.5
- siemens simatic wincc v8.0
- siemens simatic wincc v8.1
- siemens simatic wincc visualization architect (sivarc) v17
- siemens simatic wincc visualization architect (sivarc) v18
- siemens simatic wincc visualization architect (sivarc) v19
- siemens simatic wincc visualization architect (sivarc) v20
- siemens simatic d7-sys
- siemens simit rapid tester
- siemens simit simulation platform
- siemens sinamics startdrive v17
- siemens sinamics startdrive v18
- siemens sinamics startdrive v19
- siemens sinamics startdrive v20
- siemens sinec nms
- siemens sinema remote connect client
- siemens sitrans
- siemens standard pid ctrl tool
- siemens telecontrol server basic v3.1
- siemens tia administrator
- siemens tia portal cloud connector
- siemens tia portal test suite v17
- siemens tia portal test suite v18
- siemens tia portal test suite v19
- siemens tia portal test suite v20
- siemens tia project-server
- siemens tia project-server v17
- siemens totally integrated automation portal (tia portal) v17
- siemens totally integrated automation portal (tia portal) v18
- siemens totally integrated automation portal (tia portal) v19
- siemens totally integrated automation portal (tia portal) v20
- siemens wincc panel image setup
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-30033 is a high vulnerability (CVSS 8.5) in Siemens Automation License Manager V6.0, published August 12, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 13th percentile. No source names a fixed version.