CVE-2025-47809

EUVD-2025-15399
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mitreCNA
8.2 HIGH
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 6.84%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensDesigo CC family V5.0
𝑥
< *
ADP
SiemensDesigo CC family V5.1
𝑥
< *
ADP
SiemensDesigo CC family V6
𝑥
< *
ADP
SiemensDesigo CC family V7
𝑥
< *
ADP
SiemensDesigo CC family V8
𝑥
< V8.0 QU2
ADP
SiemensSENTRON Powermanager V5
𝑥
< *
ADP
SiemensSENTRON Powermanager V6
𝑥
< *
ADP
SiemensSENTRON Powermanager V7
𝑥
< *
ADP
SiemensSENTRON Powermanager V8
𝑥
< V8.0 QU2
ADP
SiemensSIMATIC PDM Maintenance Station V5.0
𝑥
< V5.0 SP2
ADP
SiemensSIMATIC WinCC OA V3.18
𝑥
< V3.18 P032
ADP
SiemensSIMATIC WinCC OA V3.19
𝑥
< V3.19 P020
ADP
SiemensSIMATIC WinCC OA V3.20
𝑥
< V3.20 P008
ADP
wibucodemeter
𝑥
< 8.30a
CNA
Common Weakness Enumeration
References
https://www.wibu.com/support/security-advisories/wibu-100120.html
https://cert-portal.siemens.com/productcert/html/ssa-201595.html
https://cert-portal.siemens.com/productcert/html/ssa-331739.html