SSA-201595: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting the Desigo CC Product Family and SENTRON Powermanager
Versions V5.0 through V8 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems CodeMeter Runtime. Successful exploitation of this vulnerability could allow privilege escalation. Siemens has released instructions how to update the CodeMeter Runtime component and recommends to apply the update on affected systems.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-47809US | — | — | ||
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-201595: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting the Desigo CC Product Family and SENTRON Powermanager - CSAF Versionself
- SSA-201595: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting the Desigo CC Product Family and SENTRON Powermanager - HTML Versionself
Behebungen (9)
- BehobenDesigo CC family V5.0
Apply patch as documented in section 'Additional Information'
- BehobenDesigo CC family V5.1
Apply patch as documented in section 'Additional Information'
- BehobenDesigo CC family V6
Apply patch as documented in section 'Additional Information'
- BehobenDesigo CC family V7
Apply patch as documented in section 'Additional Information'
- BehobenDesigo CC family V8
Update to V8.0 QU2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997962/ - BehobenSENTRON Powermanager V5
Apply patch as documented in section 'Additional Information'
- BehobenSENTRON Powermanager V6
Apply patch as documented in section 'Additional Information'
- BehobenSENTRON Powermanager V7
Apply patch as documented in section 'Additional Information'
- BehobenSENTRON Powermanager V8
Update to V8.0 QU2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109771760/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan