Siemens IAM Client
view advisory published 2025-08-12
WIBU Systems published information about a privilege escalation vulnerability under a certain circumstances and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products. Siemens has released new versions for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-47809US | — | — | ||
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-331739: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting Siemens Products - CSAF Versionself
- SSA-331739: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting Siemens Products - HTML Versionself
- ICS Advisory ICSA-25-226-05 JSONself
- ICS Advisory ICSA-25-226-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (4)
- FixedSIMATIC PDM Maintenance Station V5.0
Update to V5.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/110004810/ - FixedSIMATIC WinCC OA V3.18
Update to V3.18 P032 or later version
https://support.industry.siemens.com/cs/ww/en/view/109994004/ - FixedSIMATIC WinCC OA V3.19
Update to V3.19 P020 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989640/ - FixedSIMATIC WinCC OA V3.20
Update to V3.20 P008 or later version
https://support.industry.siemens.com/cs/ww/en/view/109990967/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan