Description
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
1.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-427
Status
published
Products (50)
Siemens/Automation License Manager V6.0
Siemens/Automation License Manager V6.2
< V6.2 Upd3
Siemens/CEMAT V10.0
Siemens/CP PtP Param configuring interface
Siemens/Create MyConfig (CMC)
< V6.9
Siemens/Energy Support Library (EnSL)
Siemens/FM Configuration Package
Siemens/Modular PID CTRL Tool
Siemens/MultiFieldbus Configuration Tool (MFCT)
< V1.5.5.0
Siemens/OpenPCS 7 V10.0
... and 40 more
Published
Aug 12, 2025
Tracked Since
Feb 18, 2026