Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

2 vulnerabilities found for SENTRON Powermanager V7 by Siemens

CVE-2025-47809 (GCVE-0-2025-47809)

Vulnerability from nvd – Published: 2025-05-16 00:00 – Updated: 2026-09-08 08:42

Summary

Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer.

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-05-16 13:35 UTC

CWE

CWE-272 - Least Privilege Violation

Assigner

mitre mitre root

References

3 references

URL	Tags
https://www.wibu.com/support/security-advisories/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

14 products

Vendor	Product	Version
Wibu	CodeMeter	Affected: 0 , < 8.30a (custom) cpe:2.3:a:wibu:codemeter::::::::
Siemens	Desigo CC family V5.0	Affected: 0 , < * (custom)
Siemens	Desigo CC family V5.1	Affected: 0 , < * (custom)
Siemens	Desigo CC family V6	Affected: 0 , < * (custom)
Siemens	Desigo CC family V7	Affected: 0 , < * (custom)
Siemens	Desigo CC family V8	Affected: 0 , < V8.0 QU2 (custom)
Siemens	SENTRON Powermanager V5	Affected: 0 , < * (custom)
Siemens	SENTRON Powermanager V6	Affected: 0 , < * (custom)
Siemens	SENTRON Powermanager V7	Affected: 0 , < * (custom)
Siemens	SENTRON Powermanager V8	Affected: 0 , < V8.0 QU2 (custom)
Siemens	SIMATIC PDM Maintenance Station V5.0	Affected: 0 , < V5.0 SP2 (custom)
Siemens	SIMATIC WinCC OA V3.18	Affected: 0 , < V3.18 P032 (custom)
Siemens	SIMATIC WinCC OA V3.19	Affected: 0 , < V3.19 P020 (custom)
Siemens	SIMATIC WinCC OA V3.20	Affected: 0 , < V3.20 P008 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-47809",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-16T13:35:54.604112Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-16T13:36:00.498Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V5.0",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V5.1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V6",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V7",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.0 QU2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SENTRON Powermanager V5",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SENTRON Powermanager V6",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SENTRON Powermanager V7",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SENTRON Powermanager V8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.0 QU2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC PDM Maintenance Station V5.0",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.0 SP2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.18",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.18 P032",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.19",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.19 P020",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.20",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.20 P008",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T08:42:59.701Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-331739.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-201595.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CodeMeter",
          "vendor": "Wibu",
          "versions": [
            {
              "lessThan": "8.30a",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:wibu:codemeter:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "8.30a",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-272",
              "description": "CWE-272 Least Privilege Violation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-16T00:18:40.444Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.wibu.com/support/security-advisories/wibu-100120.html"
        }
      ],
      "x_generator": {
        "engine": "enrichogram 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2025-47809",
    "datePublished": "2025-05-16T00:00:00.000Z",
    "dateReserved": "2025-05-10T00:00:00.000Z",
    "dateUpdated": "2026-09-08T08:42:59.701Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}