Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2025-30033 Details
Description
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
A DLL hijacking vulnerability has been identified in the Siemens Web Installer component used by various Siemens products. This vulnerability allows an attacker to execute arbitrary code when a legitimate user installs an application that relies on the affected installer component. The issue arises because the installer does not properly control the search path for dynamic link libraries, enabling the execution of malicious code during the installation process.
Siemens has released new versions for several affected products and recommends using the latest versions during setup and installation. For products where no fix is currently available, Siemens advises specific countermeasures, such as hardening the application host to prevent local access by untrusted personnel and installing applications only from an empty directory to reduce the risk of malicious DLLs being present.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Aug 12, 2025Exploitation: NoneAutomatable: NoTechnical Impact: Total
CISA-ADP
Assessed Aug 12, 2025Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-282044.html | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-427 | Uncontrolled Search Path Element | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Siemens Web Installer | All versions |
CPE
Remediation
| |
| Siemens Automation License Manager | All versions |
CPE
Remediation
| |
| Siemens CEMAT | All versions |
CPE
Remediation
| |
| Siemens CP PtP Param configuring interface | All versions |
CPE
Remediation
| |
| Siemens Create MyConfig | All versions |
CPE
Remediation
| |
| Siemens Energy Support Library | All versions |
CPE
Remediation
| |
| Siemens FM Configuration Package | All versions |
CPE
Remediation
| |
| Siemens Modular PID CTRL Tool | All versions |
CPE
Remediation
| |
| Siemens MultiFieldbus Configuration Tool | All versions |
CPE
Remediation
| |
| Siemens OpenPCS 7 | All versions |
CPE
Remediation
| |
| Siemens Network Planner | All versions |
CPE
Remediation
| |
| Siemens SIMATIC Automation Tool | All versions |
CPE
Remediation
| |
| Siemens SIMATIC Automation Tool SDK Windows | All versions |
CPE
Remediation
| |
| Siemens SIMATIC BATCH | All versions |
CPE
Remediation
| |
| Siemens SIMATIC eaSie Core Package | All versions |
CPE
Remediation
| |
| Siemens SIMATIC eaSie Document Skills | All versions |
CPE
Remediation
| |
| Siemens SIMATIC eaSie PCS 7 Skill Package | All versions |
CPE
Remediation
| |
| Siemens SIMATIC eaSie Workflow Skills | All versions |
CPE
Remediation
| |
| Siemens SIMATIC Logon | All versions |
CPE
Remediation
| |
| Siemens SIMATIC Management Agent | All versions |
CPE
Remediation
| |
| Siemens SIMATIC Management Console | All versions |
CPE
Remediation
| |
| Siemens SIMATIC NET PC Software | All versions |
CPE
Remediation
| |
| Siemens SIMATIC ODK 1500S | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 Advanced Process Faceplates | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 Advanced Process Functions | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 Advanced Process Graphics | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 Advanced Process Library | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 Advanced Process Library | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 Basis Faceplates | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 Basis Library | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 Industry Library | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 Logic Matrix | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 MPC Configurator | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 PowerControl | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 Standard Chemical Library | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7 TeleControl | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS 7/OPEN OS | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PCS neo | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PDM | All versions |
CPE
Remediation
| |
| Siemens SIMATIC PDM Maintenance Station | All versions |
CPE
Remediation
| |
| Siemens SIMATIC Process Function Library | All versions |
CPE
Remediation
| |
| Siemens SIMATIC Process Historian | All versions |
CPE
Remediation
| |
| Siemens SIMATIC ProSave | All versions |
CPE
Remediation
| |
| Siemens SIMATIC Route Control | All versions |
CPE
Remediation
| |
| Siemens SIMATIC S7 F Systems | All versions |
CPE
Remediation
| |
| Siemens SIMATIC S7-1500 Software Controller | All versions |
CPE
Remediation
| |
| Siemens SIMATIC S7-Fail-safe Configuration Tool | All versions |
CPE
Remediation
| |
| Siemens SIMATIC S7-PCT | All versions |
CPE
Remediation
| |
| Siemens SIMATIC S7-PLCSIM | All versions |
CPE
Remediation
| |
| Siemens SIMATIC S7-PLCSIM Advanced | All versions |
CPE
Remediation
| |
| Siemens SIMATIC Safety Matrix | All versions |
CPE
Remediation
| |
| Siemens SIMATIC STEP 7 CFC | All versions |
CPE
Remediation
| |
| Siemens SIMATIC STEP 7 | All versions |
CPE
Remediation
| |
| Siemens SIMATIC Target | All versions |
CPE
Remediation
| |
| Siemens SIMATIC WinCC | All versions |
CPE
Remediation
| |
| Siemens SIMATIC WinCC flexible ES | All versions |
CPE
Remediation
| |
| Siemens SIMATIC WinCC Runtime Advanced | All versions |
CPE
Remediation
| |
| Siemens SIMATIC WinCC Runtime Professional | All versions |
CPE
Remediation
| |
| Siemens SIMATIC WinCC TeleControl | All versions |
CPE
Remediation
| |
| Siemens SIMATIC WinCC Unified Line Coordination | All versions |
CPE
Remediation
| |
| Siemens SIMATIC WinCC Unified Sequence | All versions |
CPE
Remediation
| |
| Siemens SIMATIC D7-SYS | All versions |
CPE
Remediation
| |
| Siemens SIMIT Rapid Tester | All versions |
CPE
Remediation
| |
| Siemens SIMIT Simulation Platform | All versions |
CPE
Remediation
| |
| Siemens SINEC NMS | All versions |
CPE
Remediation
| |
| Siemens SINEMA Remote Connect Client | All versions |
CPE
Remediation
| |
| Siemens SITRANS | All versions |
CPE
Remediation
| |
| Siemens Standard PID CTRL Tool | All versions |
CPE
Remediation
| |
| Siemens TeleControl Server Basic | All versions |
CPE
Remediation
| |
| Siemens TIA Administrator | All versions |
CPE
Remediation
| |
| Siemens TIA Portal Cloud Connector | All versions |
CPE
Remediation
| |
| Siemens TIA Project-Server | All versions |
CPE
Remediation
| |
| Siemens TIA Project-Server | All versions |
CPE
Remediation
| |
| Siemens Totally Integrated Automation Portal | All versions |
CPE
Remediation
| |
| Siemens WinCC Panel Image Setup | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 8, 2026 | CVE Modified | [email protected] |
| Aug 11, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 12, 2025 | New CVE Received | [email protected] |