ICSA-25-231-01

icsaUScisa_csaf_ot

Siemens Desigo CC Product Family and SENTRON Powermanager

Advisory ansehen veröffentlicht 2025-08-14

Versions V5.0 through V8 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems CodeMeter Runtime. Successful exploitation of this vulnerability could allow privilege escalation. Siemens has released instructions how to update the CodeMeter Runtime component and recommends to apply the update on affected systems.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-47809US——
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (9)

  • BehobenDesigo CC family V5.0

    Apply patch as documented in section 'Additional Information'

  • BehobenDesigo CC family V5.1

    Apply patch as documented in section 'Additional Information'

  • BehobenDesigo CC family V6

    Apply patch as documented in section 'Additional Information'

  • BehobenDesigo CC family V7

    Apply patch as documented in section 'Additional Information'

  • BehobenDesigo CC family V8

    Apply patch as documented in section 'Additional Information'

  • BehobenSENTRON Powermanager V5

    Apply patch as documented in section 'Additional Information'

  • BehobenSENTRON Powermanager V6

    Apply patch as documented in section 'Additional Information'

  • BehobenSENTRON Powermanager V7

    Apply patch as documented in section 'Additional Information'

  • BehobenSENTRON Powermanager V8

    Apply patch as documented in section 'Additional Information'

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan