Skip to content
Fencer Intel
high 8.2

CVE-2025-47809 json

Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot).

published last yr. modified 2mo ago also EUVD-2025-15399

cvss
8.2
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 7%
public exploits
0
none known

Summary

Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer.

Patch / fix

  • Wibu CodeMeter 8.30a
  • Siemens Desigo CC family V8 V8.0 QU2
  • Siemens SENTRON Powermanager V8 V8.0 QU2
  • Siemens SIMATIC PDM Maintenance Station V5.0 V5.0 SP2
  • Siemens SIMATIC WinCC OA V3.18 V3.18 P032
  • Siemens SIMATIC WinCC OA V3.19 V3.19 P020
  • Siemens SIMATIC WinCC OA V3.20 V3.20 P008

Is CVE-2025-47809 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-226-05 updated cvss 8.2

Siemens IAM Client

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-25-231-02 updated cvss 8.2

Siemens Mendix SAML Module

  • Siemens Desigo CC family V5.0 Siemens Desigo CC family V5.1 Siemens Desigo CC family V6 Siemens Desigo CC family V7
    affected: vendor fix
  • Siemens Desigo CC family V8 <V8.0_QU2
    affected: fixed in V8.0 support.industry.siemens.com
  • Siemens SENTRON Powermanager V5 Siemens SENTRON Powermanager V6 Siemens SENTRON Powermanager V7
    affected: vendor fix
  • Siemens SENTRON Powermanager V8 <V8.0_QU2
    affected: fixed in V8.0 support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-25-231-01 updated cvss 8.2

Siemens Desigo CC Product Family and SENTRON Powermanager

  • Siemens Desigo CC family V5.0 Siemens Desigo CC family V5.1 Siemens Desigo CC family V6 Siemens Desigo CC family V7 Siemens Desigo CC family V8 Siemens SENTRON Powermanager V5
    +3 more products
    Siemens SENTRON Powermanager V6 Siemens SENTRON Powermanager V7 Siemens SENTRON Powermanager V8
    affected: vendor fix

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
last yr.

Exploit prediction

0.18% chance of exploitation in the next 30 days, higher than 7% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

  • Wibu CodeMeter
  • Siemens Desigo CC family V5.0
  • Siemens Desigo CC family V5.1
  • Siemens Desigo CC family V6
  • Siemens Desigo CC family V7
  • Siemens Desigo CC family V8
  • Siemens SENTRON Powermanager V5
  • Siemens SENTRON Powermanager V6
  • Siemens SENTRON Powermanager V7
  • Siemens SENTRON Powermanager V8
  • Siemens SIMATIC PDM Maintenance Station V5.0
  • Siemens SIMATIC WinCC OA V3.18
  • Siemens SIMATIC WinCC OA V3.19
  • Siemens SIMATIC WinCC OA V3.20

Classification

Weakness
  • CWE-272 Least Privilege Violation

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.