Back to the CVE list
CVE-2025-30033

Vulnerability in Siemens Automation License Manager V6.0

CVSS score

7.8

EPSS probability

%0.2

Risk score

0.0

Published

1 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-30033 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-30033 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1siemensAutomation License Manager V6.0 View
2siemensAutomation License Manager V6.2 View
3siemensCEMAT V10.0 View
4siemensCP PtP Param configuring interface View
5siemensCreate MyConfig (CMC) View
6siemensEnergy Support Library (EnSL) View
7siemensFM Configuration Package View
8siemensModular PID CTRL Tool View
9siemensMultiFieldbus Configuration Tool (MFCT) View
10siemensOpenPCS 7 V10.0 View
11siemensOpenPCS 7 V9.1 View
12siemensSiemens Network Planner (SINETPLAN) View
13siemensSIMATIC Automation Tool View
14siemensSIMATIC Automation Tool SDK Windows View
15siemensSIMATIC BATCH V10.0 View
16siemensSIMATIC BATCH V9.1 View
17siemensSIMATIC Control Function Library (CFL) V1.x View
18siemensSIMATIC Control Function Library (CFL) V2.x View
19siemensSIMATIC Control Function Library (CFL) V3.x View
20siemensSIMATIC Control Function Library (CFL) V4.x View
21siemensSIMATIC D7-SYS View
22siemensSIMATIC eaSie Core Package View
23siemensSIMATIC eaSie Document Skills View
24siemensSIMATIC eaSie PCS 7 Skill Package View
25siemensSIMATIC eaSie Workflow Skills View
26siemensSIMATIC Energy Suite V17 View
27siemensSIMATIC Energy Suite V18 View
28siemensSIMATIC Energy Suite V19 View
29siemensSIMATIC Logon V1.6 View
30siemensSIMATIC Logon V2.0 View
31siemensSIMATIC Management Agent View
32siemensSIMATIC Management Console View
33siemensSIMATIC MTP CREATOR V2.x View
34siemensSIMATIC MTP CREATOR V3.x View
35siemensSIMATIC MTP CREATOR V4.x View
36siemensSIMATIC MTP CREATOR V5.x View
37siemensSIMATIC MTP Integrator V1.x View
38siemensSIMATIC MTP Integrator V2.x View
39siemensSIMATIC NET PC Software V16 View
40siemensSIMATIC NET PC Software V17 View
41siemensSIMATIC NET PC Software V18 View
42siemensSIMATIC NET PC Software V19 View
43siemensSIMATIC NET PC Software V20 View
44siemensSIMATIC ODK 1500S View
45siemensSIMATIC PCS 7 Advanced Process Faceplates V9.1 View
46siemensSIMATIC PCS 7 Advanced Process Functions V2.1 View
47siemensSIMATIC PCS 7 Advanced Process Functions V2.2 View
48siemensSIMATIC PCS 7 Advanced Process Graphics V10.0 View
49siemensSIMATIC PCS 7 Advanced Process Graphics V9.1 View
50siemensSIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0 View
51siemensSIMATIC PCS 7 Advanced Process Library V9.1 View
52siemensSIMATIC PCS 7 Basis Faceplates V9.1 View
53siemensSIMATIC PCS 7 Basis Library V10.0 View
54siemensSIMATIC PCS 7 Basis Library V9.1 View
55siemensSIMATIC PCS 7 Industry Library V10.0 View
56siemensSIMATIC PCS 7 Industry Library V9.0 View
57siemensSIMATIC PCS 7 Industry Library V9.1 View
58siemensSIMATIC PCS 7 Logic Matrix V10.0 View
59siemensSIMATIC PCS 7 Logic Matrix V9.1 View
60siemensSIMATIC PCS 7 MPC Configurator View
61siemensSIMATIC PCS 7 PowerControl V9.1 View
62siemensSIMATIC PCS 7 Standard Chemical Library V10.0 View
63siemensSIMATIC PCS 7 Standard Chemical Library V9.1 View
64siemensSIMATIC PCS 7 TeleControl V9.1 View
65siemensSIMATIC PCS 7 V10.0 View
66siemensSIMATIC PCS 7 V9.1 View
67siemensSIMATIC PCS 7/OPEN OS V9.1 View
68siemensSIMATIC PCS neo V5.0 View
69siemensSIMATIC PCS neo V6.0 View
70siemensSIMATIC PDM Maintenance Station V5.0 View
71siemensSIMATIC PDM V9.2 View
72siemensSIMATIC PDM V9.3 View
73siemensSIMATIC Process Function Library (PFL) V4.0 View
74siemensSIMATIC Process Historian 2020 View
75siemensSIMATIC Process Historian 2022 View
76siemensSIMATIC Process Historian 2024 View
77siemensSIMATIC ProSave V17 View
78siemensSIMATIC ProSave V18 View
79siemensSIMATIC ProSave V19 View
80siemensSIMATIC ProSave V20 View
81siemensSIMATIC Route Control V10.0 View
82siemensSIMATIC Route Control V9.1 View
83siemensSIMATIC S7 F Systems V6.3 View
84siemensSIMATIC S7 F Systems V6.4 View
85siemensSIMATIC S7-1500 Software Controller V2 View
86siemensSIMATIC S7-1500 Software Controller V3 View
87siemensSIMATIC S7-Fail-safe Configuration Tool (S7-FCT) View
88siemensSIMATIC S7-PCT View
89siemensSIMATIC S7-PLCSIM Advanced View
90siemensSIMATIC S7-PLCSIM V17 View
91siemensSIMATIC S7-PLCSIM V18 View
92siemensSIMATIC S7-PLCSIM V19 View
93siemensSIMATIC S7-PLCSIM V20 View
94siemensSIMATIC Safety Matrix V6.3 View
95siemensSIMATIC STEP 7 CFC V19 View
96siemensSIMATIC STEP 7 CFC V20 View
97siemensSIMATIC STEP 7 V5.7 View
98siemensSIMATIC Target View
99siemensSIMATIC WinCC flexible ES View
100siemensSIMATIC WinCC Runtime Advanced View
101siemensSIMATIC WinCC Runtime Professional View
102siemensSIMATIC WinCC Runtime Professional V20 View
103siemensSIMATIC WinCC TeleControl View
104siemensSIMATIC WinCC Unified Line Coordination View
105siemensSIMATIC WinCC Unified PC Runtime V18 View
106siemensSIMATIC WinCC Unified PC Runtime V19 View
107siemensSIMATIC WinCC Unified PC Runtime V20 View
108siemensSIMATIC WinCC Unified Sequence View
109siemensSIMATIC WinCC V7.5 View
110siemensSIMATIC WinCC V8.0 View
111siemensSIMATIC WinCC V8.1 View
112siemensSIMATIC WinCC Visualization Architect (SiVArc) V17 View
113siemensSIMATIC WinCC Visualization Architect (SiVArc) V18 View
114siemensSIMATIC WinCC Visualization Architect (SiVArc) V19 View
115siemensSIMATIC WinCC Visualization Architect (SiVArc) V20 View
116siemensSIMIT Rapid Tester View
117siemensSIMIT Simulation Platform View
118siemensSINAMICS Startdrive V17 View
119siemensSINAMICS Startdrive V18 View
120siemensSINAMICS Startdrive V19 View
121siemensSINAMICS Startdrive V20 View
122siemenssinec nms View
123siemensSINEMA Remote Connect Client View
124siemensSITRANS View
125siemensStandard PID CTRL Tool View
126siemensTeleControl Server Basic V3.1 View
127siemensTIA Administrator View
128siemensTIA Portal Cloud Connector View
129siemensTIA Portal Test Suite V17 View
130siemensTIA Portal Test Suite V18 View
131siemensTIA Portal Test Suite V19 View
132siemensTIA Portal Test Suite V20 View
133siemensTIA Project-Server View
134siemensTIA Project-Server V17 View
135siemensTotally Integrated Automation Portal (TIA Portal) V17 View
136siemensTotally Integrated Automation Portal (TIA Portal) V18 View
137siemensTotally Integrated Automation Portal (TIA Portal) V19 View
138siemensTotally Integrated Automation Portal (TIA Portal) V20 View
139siemensWinCC Panel Image Setup View
Total affected vendors: 1|Products: 139

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.5CVSS V4_0HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NCVE CNA
8.5CVSS V40HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD
7.8CVSS V3_1HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE CNA
7.8CVSS V31HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-30033 is associated with the following CWEs:

CWE-427: Common Weakness Enumeration Entry CWE-427

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-30033 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsGerekmiyor
UserGerekiyor

Official Sources and Advisories

https://cert-portal.siemens.com/productcert/html/ssa-282044.htmlvendor-advisory

CVSS Vector Radar Chart

7.8 / 10
Attack VectorLocalComplexityLowPrivilegesNoneUser Interact.RequiredConfidentialityLowIntegrityHighAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredNone required
User Interaction—
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)High
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

S
siemens logo
siemens

Weakness Type (CWE & CAPEC)

CWE-427

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-30033"