جزئیات آسیب‌پذیری
CVE-2025-30033
Siemens Automation License ManagerSiemens CEMATSiemens CP PtP Param configuring interfaceSiemens Create MyConfigSiemens Energy Support LibrarySiemens FM Configuration Package
CVSS 4.0
8.5بالا
شرح رسمی (انگلیسی)
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.5بالا | 4.0 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 7.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Siemens | Automation License Manager V6.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Automation License Manager V6.2 | v < V6.2 Upd3 | CVEProject cvelistV5 (CNA) |
| Siemens | CEMAT V10.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | CP PtP Param configuring interface | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Create MyConfig (CMC) | v < V6.9 | CVEProject cvelistV5 (CNA) |
| Siemens | Energy Support Library (EnSL) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | FM Configuration Package | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Modular PID CTRL Tool | همه | CVEProject cvelistV5 (CNA) |
| Siemens | MultiFieldbus Configuration Tool (MFCT) | v < V1.5.5.0 | CVEProject cvelistV5 (CNA) |
| Siemens | OpenPCS 7 V10.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | OpenPCS 7 V9.1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Automation Tool | v < V5.0 SP4 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Automation Tool SDK Windows | v < V5.0 SP4 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC BATCH V10.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC BATCH V9.1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Control Function Library (CFL) V1.x | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Control Function Library (CFL) V2.x | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Control Function Library (CFL) V3.x | v < V3.1.0.2 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Control Function Library (CFL) V4.x | v < V4.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Energy Suite V17 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Energy Suite V18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Energy Suite V19 | v < V19 Update 4 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Logon V1.6 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Logon V2.0 | v < V2.0 Upd3 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC MTP CREATOR V3.x | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC MTP CREATOR V4.x | v < V4.1.0.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC MTP CREATOR V2.x | v < V2.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC MTP CREATOR V5.x | v < V5.0.0.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC MTP Integrator V1.x | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC MTP Integrator V2.x | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Management Agent | v < V9.1 SP1 Upd8 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Management Console | v < V9.1 SP1 Upd8 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC NET PC Software V16 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC NET PC Software V17 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC NET PC Software V18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC NET PC Software V19 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC NET PC Software V20 | v < V20.0 Update 1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC ODK 1500S | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Advanced Process Faceplates V9.1 | v < V9.1 SP2 Upd4 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Advanced Process Functions V2.1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Advanced Process Functions V2.2 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Advanced Process Graphics V10.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Advanced Process Graphics V9.1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Advanced Process Library V9.1 | v < V9.1 SP2 Upd6 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Basis Faceplates V9.1 | v < V9.1 SP2 Upd2 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Basis Library V10.0 | v < V10.0 SP1 Upd2 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Basis Library V9.1 | v < V9.1 SP2 Upd8 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Industry Library V10.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Industry Library V9.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Industry Library V9.1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Logic Matrix V10.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Logic Matrix V9.1 | v < V9.1 Upd8 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 MPC Configurator | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 PowerControl V9.1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Standard Chemical Library V10.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 Standard Chemical Library V9.1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 TeleControl V9.1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 V10.0 | v < V10.0 SP1 UC01 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7 V9.1 | v < V9.1 SP1 UC08 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS 7/OPEN OS V9.1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS neo V5.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PCS neo V6.0 | v < V6.0 SP1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PDM Maintenance Station V5.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PDM V9.2 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC PDM V9.3 | v < V9.3 SP1 Upd2 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC ProSave V17 | v < V17 Update 9 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC ProSave V18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC ProSave V19 | v < V19 Update 4 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC ProSave V20 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Process Function Library (PFL) V4.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Process Historian 2020 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Process Historian 2022 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Process Historian 2024 | v < V2024 SP1 Upd2 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Route Control V10.0 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Route Control V9.1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7 F Systems V6.3 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7 F Systems V6.4 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 Software Controller V2 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 Software Controller V3 | v < V31.1.5 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-Fail-safe Configuration Tool (S7-FCT) | v < V4.0.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-PCT | v < V3.5 SP4 Update 1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-PLCSIM Advanced | v < V7.0 Update 1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-PLCSIM V17 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-PLCSIM V18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-PLCSIM V19 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-PLCSIM V20 | v < V20 Update 1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC STEP 7 CFC V19 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC STEP 7 CFC V20 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC STEP 7 V5.7 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Safety Matrix V6.3 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Target | v < V6.0 SP3 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Runtime Advanced | v < V17 Update 9 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Runtime Professional | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Runtime Professional V20 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC TeleControl | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Unified Line Coordination | v < V20 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Unified PC Runtime V18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Unified PC Runtime V19 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Unified PC Runtime V20 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Unified Sequence | v < V20 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC V7.5 | v < V7.5 SP2 Update 20 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC V8.0 | v < V8.0 Update 8 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC V8.1 | v < V8.1 Update 3 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Visualization Architect (SiVArc) V17 | v < V17 Update 9 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Visualization Architect (SiVArc) V18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Visualization Architect (SiVArc) V19 | v < V19 Update 4 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC Visualization Architect (SiVArc) V20 | v < V20 Update 3 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC WinCC flexible ES | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC eaSie Core Package | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC eaSie Document Skills | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC eaSie PCS 7 Skill Package | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC eaSie Workflow Skills | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC D7-SYS | v < V10.0 SP1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMIT Rapid Tester | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMIT Simulation Platform | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SINAMICS Startdrive V17 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SINAMICS Startdrive V18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SINAMICS Startdrive V19 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SINAMICS Startdrive V20 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SINEC NMS | v < V4.0 | CVEProject cvelistV5 (CNA) |
| Siemens | SINEMA Remote Connect Client | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SITRANS | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Siemens Network Planner (SINETPLAN) | v < V2.0 SP2 | CVEProject cvelistV5 (CNA) |
| Siemens | Standard PID CTRL Tool | همه | CVEProject cvelistV5 (CNA) |
| Siemens | TIA Administrator | v < V3.0.6 | CVEProject cvelistV5 (CNA) |
| Siemens | TIA Portal Cloud Connector | v < V2.3 | CVEProject cvelistV5 (CNA) |
| Siemens | TIA Portal Test Suite V17 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | TIA Portal Test Suite V18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | TIA Portal Test Suite V19 | v < V19 Update 4 | CVEProject cvelistV5 (CNA) |
| Siemens | TIA Portal Test Suite V20 | v < V20 Update 3 | CVEProject cvelistV5 (CNA) |
| Siemens | TIA Project-Server | v < V2.2 | CVEProject cvelistV5 (CNA) |
| Siemens | TIA Project-Server V17 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | TeleControl Server Basic V3.1 | v < V3.1.2.2 | CVEProject cvelistV5 (CNA) |
| Siemens | Totally Integrated Automation Portal (TIA Portal) V17 | v < V17 Update 9 | CVEProject cvelistV5 (CNA) |
| Siemens | Totally Integrated Automation Portal (TIA Portal) V18 | v < V18 Update 6 | CVEProject cvelistV5 (CNA) |
| Siemens | Totally Integrated Automation Portal (TIA Portal) V19 | v < V19 Update 4 | CVEProject cvelistV5 (CNA) |
| Siemens | Totally Integrated Automation Portal (TIA Portal) V20 | v < V20 Update 4 | CVEProject cvelistV5 (CNA) |
| Siemens | WinCC Panel Image Setup | v < V17 Update 9 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۵/۲۱
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۷/۲۱
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- siemens
پیش‌بینی بهره‌برداری (EPSS)
۰٫۲۲٪
احتمال بهره‌برداری در ۳۰ روز
۱۳٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-427Uncontrolled Search Path Element