{"id":"CVE-2025-30033","aliases":["EUVD-2025-24250","GHSA-wc4j-qqmp-4vc4"],"status":"published","title":"The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to...","description":"The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.","severity":{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00224,"percentile":0.13136,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-427"],"published":"2025-08-12T11:16:56Z","modified":"2026-11-10T11:30:27Z","products":[{"vendor":"siemens","product":"automation license manager v6.0"},{"vendor":"siemens","product":"automation license manager v6.2"},{"vendor":"siemens","product":"cemat v10.0"},{"vendor":"siemens","product":"cp ptp param configuring interface"},{"vendor":"siemens","product":"create myconfig (cmc)"},{"vendor":"siemens","product":"energy support library (ensl)"},{"vendor":"siemens","product":"fm configuration package"},{"vendor":"siemens","product":"modular pid ctrl tool"},{"vendor":"siemens","product":"multifieldbus configuration tool (mfct)"},{"vendor":"siemens","product":"openpcs 7 v10.0"},{"vendor":"siemens","product":"openpcs 7 v9.1"},{"vendor":"siemens","product":"siemens network planner (sinetplan)"},{"vendor":"siemens","product":"simatic automation tool"},{"vendor":"siemens","product":"simatic automation tool sdk windows"},{"vendor":"siemens","product":"simatic batch v10.0"},{"vendor":"siemens","product":"simatic batch v9.1"},{"vendor":"siemens","product":"simatic control function library (cfl) v1.x"},{"vendor":"siemens","product":"simatic control function library (cfl) v2.x"},{"vendor":"siemens","product":"simatic control function library (cfl) v3.x"},{"vendor":"siemens","product":"simatic control function library (cfl) v4.x"},{"vendor":"siemens","product":"simatic easie core package (6dl5424-0ax00-0av8)"},{"vendor":"siemens","product":"simatic easie document skills v26"},{"vendor":"siemens","product":"simatic easie pcs 7 skill package v26 (6dl5424-0bx00-0av8)"},{"vendor":"siemens","product":"simatic easie workflow skills v26"},{"vendor":"siemens","product":"simatic energy suite v17"},{"vendor":"siemens","product":"simatic energy suite v18"},{"vendor":"siemens","product":"simatic energy suite v19"},{"vendor":"siemens","product":"simatic logon v1.6"},{"vendor":"siemens","product":"simatic logon v2.0"},{"vendor":"siemens","product":"simatic management agent"},{"vendor":"siemens","product":"simatic management console"},{"vendor":"siemens","product":"simatic mtp creator v3.x"},{"vendor":"siemens","product":"simatic mtp creator v4.x"},{"vendor":"siemens","product":"simatic mtp creator v2.x"},{"vendor":"siemens","product":"simatic mtp creator v5.x"},{"vendor":"siemens","product":"simatic mtp integrator v1.x"},{"vendor":"siemens","product":"simatic mtp integrator v2.x"},{"vendor":"siemens","product":"simatic net pc software v16"},{"vendor":"siemens","product":"simatic net pc software v17"},{"vendor":"siemens","product":"simatic net pc software v18"},{"vendor":"siemens","product":"simatic net pc software v19"},{"vendor":"siemens","product":"simatic net pc software v20"},{"vendor":"siemens","product":"simatic odk 1500s"},{"vendor":"siemens","product":"simatic pcs 7 advanced process faceplates v9.1"},{"vendor":"siemens","product":"simatic pcs 7 advanced process functions v2.1"},{"vendor":"siemens","product":"simatic pcs 7 advanced process functions v2.2"},{"vendor":"siemens","product":"simatic pcs 7 advanced process graphics v10.0"},{"vendor":"siemens","product":"simatic pcs 7 advanced process graphics v9.1"},{"vendor":"siemens","product":"simatic pcs 7 advanced process library incl. faceplates v10.0"},{"vendor":"siemens","product":"simatic pcs 7 advanced process library v9.1"},{"vendor":"siemens","product":"simatic pcs 7 basis faceplates v9.1"},{"vendor":"siemens","product":"simatic pcs 7 basis library v10.0"},{"vendor":"siemens","product":"simatic pcs 7 basis library v9.1"},{"vendor":"siemens","product":"simatic pcs 7 industry library v10.0"},{"vendor":"siemens","product":"simatic pcs 7 industry library v9.0"},{"vendor":"siemens","product":"simatic pcs 7 industry library v9.1"},{"vendor":"siemens","product":"simatic pcs 7 logic matrix v10.0"},{"vendor":"siemens","product":"simatic pcs 7 logic matrix v9.1"},{"vendor":"siemens","product":"simatic pcs 7 mpc configurator"},{"vendor":"siemens","product":"simatic pcs 7 powercontrol v9.1"},{"vendor":"siemens","product":"simatic pcs 7 standard chemical library v10.0"},{"vendor":"siemens","product":"simatic pcs 7 standard chemical library v9.1"},{"vendor":"siemens","product":"simatic pcs 7 telecontrol v9.1"},{"vendor":"siemens","product":"simatic pcs 7 v10.0"},{"vendor":"siemens","product":"simatic pcs 7 v9.1"},{"vendor":"siemens","product":"simatic pcs 7/open os v9.1"},{"vendor":"siemens","product":"simatic pcs neo v5.0"},{"vendor":"siemens","product":"simatic pcs neo v6.0"},{"vendor":"siemens","product":"simatic pdm maintenance station v5.0"},{"vendor":"siemens","product":"simatic pdm v9.2"},{"vendor":"siemens","product":"simatic pdm v9.3"},{"vendor":"siemens","product":"simatic process function library (pfl) v4.0"},{"vendor":"siemens","product":"simatic process historian 2020"},{"vendor":"siemens","product":"simatic process historian 2022"},{"vendor":"siemens","product":"simatic process historian 2024"},{"vendor":"siemens","product":"simatic prosave v17"},{"vendor":"siemens","product":"simatic prosave v18"},{"vendor":"siemens","product":"simatic prosave v19"},{"vendor":"siemens","product":"simatic prosave v20"},{"vendor":"siemens","product":"simatic route control v10.0"},{"vendor":"siemens","product":"simatic route control v9.1"},{"vendor":"siemens","product":"simatic s7 f systems v6.3"},{"vendor":"siemens","product":"simatic s7 f systems v6.4"},{"vendor":"siemens","product":"simatic s7-1500 software controller v2"},{"vendor":"siemens","product":"simatic s7-1500 software controller v3"},{"vendor":"siemens","product":"simatic s7-fail-safe configuration tool (s7-fct)"},{"vendor":"siemens","product":"simatic s7-pct"},{"vendor":"siemens","product":"simatic s7-plcsim advanced"},{"vendor":"siemens","product":"simatic s7-plcsim v17"},{"vendor":"siemens","product":"simatic s7-plcsim v18"},{"vendor":"siemens","product":"simatic s7-plcsim v19"},{"vendor":"siemens","product":"simatic s7-plcsim v20"},{"vendor":"siemens","product":"simatic safety matrix v6.3"},{"vendor":"siemens","product":"simatic step 7 cfc v19"},{"vendor":"siemens","product":"simatic step 7 cfc v20"},{"vendor":"siemens","product":"simatic step 7 v5.7"},{"vendor":"siemens","product":"simatic target"},{"vendor":"siemens","product":"simatic wincc flexible es"},{"vendor":"siemens","product":"simatic wincc runtime advanced"},{"vendor":"siemens","product":"simatic wincc runtime professional"},{"vendor":"siemens","product":"simatic wincc runtime professional v20"},{"vendor":"siemens","product":"simatic wincc telecontrol"},{"vendor":"siemens","product":"simatic wincc unified line coordination"},{"vendor":"siemens","product":"simatic wincc unified pc runtime v18"},{"vendor":"siemens","product":"simatic wincc unified pc runtime v19"},{"vendor":"siemens","product":"simatic wincc unified pc runtime v20"},{"vendor":"siemens","product":"simatic wincc unified sequence"},{"vendor":"siemens","product":"simatic wincc v7.5"},{"vendor":"siemens","product":"simatic wincc v8.0"},{"vendor":"siemens","product":"simatic wincc v8.1"},{"vendor":"siemens","product":"simatic wincc visualization architect (sivarc) v17"},{"vendor":"siemens","product":"simatic wincc visualization architect (sivarc) v18"},{"vendor":"siemens","product":"simatic wincc visualization architect (sivarc) v19"},{"vendor":"siemens","product":"simatic wincc visualization architect (sivarc) v20"},{"vendor":"siemens","product":"simatic d7-sys"},{"vendor":"siemens","product":"simit rapid tester"},{"vendor":"siemens","product":"simit simulation platform"},{"vendor":"siemens","product":"sinamics startdrive v17"},{"vendor":"siemens","product":"sinamics startdrive v18"},{"vendor":"siemens","product":"sinamics startdrive v19"},{"vendor":"siemens","product":"sinamics startdrive v20"},{"vendor":"siemens","product":"sinec nms"},{"vendor":"siemens","product":"sinema remote connect client"},{"vendor":"siemens","product":"sitrans"},{"vendor":"siemens","product":"standard pid ctrl tool"},{"vendor":"siemens","product":"telecontrol server basic v3.1"},{"vendor":"siemens","product":"tia administrator"},{"vendor":"siemens","product":"tia portal cloud connector"},{"vendor":"siemens","product":"tia portal test suite v17"},{"vendor":"siemens","product":"tia portal test suite v18"},{"vendor":"siemens","product":"tia portal test suite v19"},{"vendor":"siemens","product":"tia portal test suite v20"},{"vendor":"siemens","product":"tia project-server"},{"vendor":"siemens","product":"tia project-server v17"},{"vendor":"siemens","product":"totally integrated automation portal (tia portal) v17"},{"vendor":"siemens","product":"totally integrated automation portal (tia portal) v18"},{"vendor":"siemens","product":"totally integrated automation portal (tia portal) v19"},{"vendor":"siemens","product":"totally integrated automation portal (tia portal) v20"},{"vendor":"siemens","product":"wincc panel image setup"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-282044.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30033"},{"url":"https://github.com/advisories/GHSA-wc4j-qqmp-4vc4"}],"sources":{"cve":[{"id":"CVE-2025-30033","description":"The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.","status":"published","published":"2025-08-12T11:16:56.565Z","modified":"2026-11-10T11:30:27.866Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-427"],"updated_at":"2026-11-10T12:38:31.627777Z"}],"euvd":[{"id":"EUVD-2025-24250","description":"The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.","status":"published","published":"2025-08-12T11:16:56Z","modified":"2026-11-10T11:30:27Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-10T12:20:52.279403Z"}],"ghsa":[{"id":"GHSA-wc4j-qqmp-4vc4","title":"The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to...","description":"The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.","status":"published","published":"2025-08-12T12:30:33Z","modified":"2025-08-12T12:30:33Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T15:03:14.349614Z"}],"nvd":[{"id":"CVE-2025-30033","description":"The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.","status":"published","published":"2025-08-12T12:15:34.733Z","modified":"2026-11-10T12:17:14.537Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-427"],"updated_at":"2026-11-10T14:19:24.315701Z"}]}}