SSA-331739: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting Siemens Products
WIBU Systems published information about a privilege escalation vulnerability under a certain circumstances and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-47809US | — | — | ||
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- FixedSIMATIC PDM Maintenance Station V5.0
Update to V5.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/110004810/ - FixedSIMATIC WinCC OA V3.18
Update to V3.18 P032 or later version
https://support.industry.siemens.com/cs/ww/en/view/109994004/ - FixedSIMATIC WinCC OA V3.19
Update to V3.19 P020 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989640/ - FixedSIMATIC WinCC OA V3.20
Update to V3.20 P008 or later version
https://support.industry.siemens.com/cs/ww/en/view/109990967/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan