Siemens IAM Client
WIBU Systems published information about a privilege escalation vulnerability under a certain circumstances and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-47809US | — | — | ||
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-331739: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting Siemens Products - CSAF Versionself
- SSA-331739: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting Siemens Products - HTML Versionself
- ICS Advisory ICSA-25-226-05 JSONself
- ICS Advisory ICSA-25-226-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- BehobenSIMATIC PDM Maintenance Station V5.0
Update to V5.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/110004810/ - BehobenSIMATIC WinCC OA V3.18
Update to V3.18 P032 or later version
https://support.industry.siemens.com/cs/ww/en/view/109994004/ - BehobenSIMATIC WinCC OA V3.19
Update to V3.19 P020 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989640/ - BehobenSIMATIC WinCC OA V3.20
Update to V3.20 P008 or later version
https://support.industry.siemens.com/cs/ww/en/view/109990967/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan