CVE-2025-47809
No fix known EPSS <1%CVSS 8.2
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer.
Products: Wibu CodeMeter, Siemens Desigo CC family V5.0, Siemens Desigo CC family V5.1, Siemens Desigo CC family V6, Siemens Desigo CC family V7, Siemens Desigo CC family V8, Siemens SENTRON Powermanager V5, Siemens SENTRON Powermanager V6, Siemens SENTRON Powermanager V7, Siemens SENTRON Powermanager V8, Siemens SIMATIC PDM Maintenance Station V5.0, Siemens SIMATIC WinCC OA V3.18, Siemens SIMATIC WinCC OA V3.19, Siemens SIMATIC WinCC OA V3.20