目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CVE-2025-30033— Siemens多款产品 代码问题漏洞

一分钟漏洞结论

影响对象
Siemens Automation License Manager V6.0
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Siemens Automation License Manager是德国西门子（Siemens）公司的一款用于Siemens产品的许可证管理器。 Siemens多款产品存在代码问题漏洞，该漏洞源于容易受到DLL劫持攻击，可能导致执行任意代码。

CVSS 7.8 · High EPSS 0.21% · P9

可能的 ATT&CK 技术 1 AI

T1574 · Hijack Execution Flow

影响版本矩阵 139

厂商产品 版本范围状态
Siemens Automation License Manager V6.0 < * affected
Siemens Automation License Manager V6.2 < V6.2 Upd3 affected
Siemens CEMAT V10.0 < * affected
Siemens CP PtP Param configuring interface < * affected
Siemens Create MyConfig (CMC) < V6.9 affected
Siemens Energy Support Library (EnSL) < * affected
Siemens FM Configuration Package < * affected
Siemens Modular PID CTRL Tool < * affected
Siemens MultiFieldbus Configuration Tool (MFCT) < V1.5.5.0 affected
Siemens OpenPCS 7 V10.0 < * affected
Siemens OpenPCS 7 V9.1 < * affected
Siemens Siemens Network Planner (SINETPLAN) < V2.0 SP2 affected
Siemens SIMATIC Automation Tool < V5.0 SP4 affected
Siemens SIMATIC Automation Tool SDK Windows < V5.0 SP4 affected
Siemens SIMATIC BATCH V10.0 < * affected
Siemens SIMATIC BATCH V9.1 < * affected
Siemens SIMATIC Control Function Library (CFL) V1.x < * affected
Siemens SIMATIC Control Function Library (CFL) V2.x < * affected
Siemens SIMATIC Control Function Library (CFL) V3.x < V3.1.0.2 affected
Siemens SIMATIC Control Function Library (CFL) V4.x < V4.1 affected
Siemens SIMATIC D7-SYS < V10.0 SP1 affected
Siemens SIMATIC eaSie Core Package < * affected
Siemens SIMATIC eaSie Document Skills < * affected
Siemens SIMATIC eaSie PCS 7 Skill Package < * affected
Siemens SIMATIC eaSie Workflow Skills < * affected
Siemens SIMATIC Energy Suite V17 < * affected
Siemens SIMATIC Energy Suite V18 < * affected
Siemens SIMATIC Energy Suite V19 < V19 Update 4 affected
Siemens SIMATIC Logon V1.6 < * affected
Siemens SIMATIC Logon V2.0 < V2.0 Upd3 affected
Siemens SIMATIC Management Agent < V9.1 SP1 Upd8 affected
Siemens SIMATIC Management Console < V9.1 SP1 Upd8 affected
Siemens SIMATIC MTP CREATOR V2.x < V2.1 affected
Siemens SIMATIC MTP CREATOR V3.x < * affected
Siemens SIMATIC MTP CREATOR V4.x < V4.1.0.1 affected
Siemens SIMATIC MTP CREATOR V5.x < V5.0.0.1 affected
Siemens SIMATIC MTP Integrator V1.x < * affected
Siemens SIMATIC MTP Integrator V2.x < * affected
Siemens SIMATIC NET PC Software V16 < * affected
Siemens SIMATIC NET PC Software V17 < * affected
Siemens SIMATIC NET PC Software V18 < * affected
Siemens SIMATIC NET PC Software V19 < * affected
Siemens SIMATIC NET PC Software V20 < V20.0 Update 1 affected
Siemens SIMATIC ODK 1500S < * affected
Siemens SIMATIC PCS 7 Advanced Process Faceplates V9.1 < V9.1 SP2 Upd4 affected
Siemens SIMATIC PCS 7 Advanced Process Functions V2.1 < * affected
Siemens SIMATIC PCS 7 Advanced Process Functions V2.2 < * affected
Siemens SIMATIC PCS 7 Advanced Process Graphics V10.0 < * affected
Siemens SIMATIC PCS 7 Advanced Process Graphics V9.1 < * affected
Siemens SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0 < * affected
Siemens SIMATIC PCS 7 Advanced Process Library V9.1 < V9.1 SP2 Upd6 affected
Siemens SIMATIC PCS 7 Basis Faceplates V9.1 < V9.1 SP2 Upd2 affected
Siemens SIMATIC PCS 7 Basis Library V10.0 < V10.0 SP1 Upd2 affected
Siemens SIMATIC PCS 7 Basis Library V9.1 < V9.1 SP2 Upd8 affected
Siemens SIMATIC PCS 7 Industry Library V10.0 < * affected
Siemens SIMATIC PCS 7 Industry Library V9.0 < * affected
Siemens SIMATIC PCS 7 Industry Library V9.1 < * affected
Siemens SIMATIC PCS 7 Logic Matrix V10.0 < * affected
Siemens SIMATIC PCS 7 Logic Matrix V9.1 < V9.1 Upd8 affected
Siemens SIMATIC PCS 7 MPC Configurator < * affected
Siemens SIMATIC PCS 7 PowerControl V9.1 < * affected
Siemens SIMATIC PCS 7 Standard Chemical Library V10.0 < * affected
Siemens SIMATIC PCS 7 Standard Chemical Library V9.1 < * affected
Siemens SIMATIC PCS 7 TeleControl V9.1 < * affected
Siemens SIMATIC PCS 7 V10.0 < V10.0 SP1 UC01 affected
Siemens SIMATIC PCS 7 V9.1 < V9.1 SP1 UC08 affected
Siemens SIMATIC PCS 7/OPEN OS V9.1 < * affected
Siemens SIMATIC PCS neo V5.0 < * affected
Siemens SIMATIC PCS neo V6.0 < V6.0 SP1 affected
Siemens SIMATIC PDM Maintenance Station V5.0 < * affected
Siemens SIMATIC PDM V9.2 < * affected
Siemens SIMATIC PDM V9.3 < V9.3 SP1 Upd2 affected
Siemens SIMATIC Process Function Library (PFL) V4.0 < * affected
Siemens SIMATIC Process Historian 2020 < * affected
Siemens SIMATIC Process Historian 2022 < * affected
Siemens SIMATIC Process Historian 2024 < V2024 SP1 Upd2 affected
Siemens SIMATIC ProSave V17 < V17 Update 9 affected
Siemens SIMATIC ProSave V18 < * affected
Siemens SIMATIC ProSave V19 < V19 Update 4 affected
Siemens SIMATIC ProSave V20 < * affected
Siemens SIMATIC Route Control V10.0 < * affected
Siemens SIMATIC Route Control V9.1 < * affected
Siemens SIMATIC S7 F Systems V6.3 < * affected
Siemens SIMATIC S7 F Systems V6.4 < * affected
Siemens SIMATIC S7-1500 Software Controller V2 < * affected
Siemens SIMATIC S7-1500 Software Controller V3 < V31.1.5 affected
Siemens SIMATIC S7-Fail-safe Configuration Tool (S7-FCT) < V4.0.1 affected
Siemens SIMATIC S7-PCT < V3.5 SP4 Update 1 affected
Siemens SIMATIC S7-PLCSIM Advanced < V7.0 Update 1 affected
Siemens SIMATIC S7-PLCSIM V17 < * affected
Siemens SIMATIC S7-PLCSIM V18 < * affected
Siemens SIMATIC S7-PLCSIM V19 < * affected
Siemens SIMATIC S7-PLCSIM V20 < V20 Update 1 affected
Siemens SIMATIC Safety Matrix < * affected
Siemens SIMATIC STEP 7 CFC V19 < * affected
Siemens SIMATIC STEP 7 CFC V20 < * affected
Siemens SIMATIC STEP 7 V5.7 < * affected
Siemens SIMATIC Target < V6.0 SP3 affected
Siemens SIMATIC WinCC flexible ES < * affected
Siemens SIMATIC WinCC Runtime Advanced < V17 Update 9 affected
Siemens SIMATIC WinCC Runtime Professional < V21 affected
Siemens SIMATIC WinCC Runtime Professional V20 < * affected
Siemens SIMATIC WinCC TeleControl < * affected
Siemens SIMATIC WinCC Unified Line Coordination < V20 affected
Siemens SIMATIC WinCC Unified PC Runtime V18 < * affected
Siemens SIMATIC WinCC Unified PC Runtime V19 < * affected
Siemens SIMATIC WinCC Unified PC Runtime V20 < * affected
Siemens SIMATIC WinCC Unified Sequence < V20 affected
Siemens SIMATIC WinCC V7.5 < V7.5 SP2 Update 20 affected
Siemens SIMATIC WinCC V8.0 < V8.0 Update 8 affected
Siemens SIMATIC WinCC V8.1 < V8.1 Update 3 affected
Siemens SIMATIC WinCC Visualization Architect (SiVArc) V17 < V17 Update 9 affected
Siemens SIMATIC WinCC Visualization Architect (SiVArc) V18 < * affected
Siemens SIMATIC WinCC Visualization Architect (SiVArc) V19 < V19 Update 4 affected
Siemens SIMATIC WinCC Visualization Architect (SiVArc) V20 < V20 Update 3 affected
Siemens SIMIT Rapid Tester < * affected
Siemens SIMIT Simulation Platform < * affected
Siemens SINAMICS Startdrive V17 < * affected
Siemens SINAMICS Startdrive V18 < * affected
Siemens SINAMICS Startdrive V19 < * affected
Siemens SINAMICS Startdrive V20 < * affected
Siemens SINEC NMS < V4.0 affected
Siemens SINEMA Remote Connect Client < * affected
Siemens SITRANS < * affected
Siemens Standard PID CTRL Tool < * affected
Siemens TeleControl Server Basic V3.1 < V3.1.2.2 affected
Siemens TIA Administrator < V3.0.6 affected
Siemens TIA Portal Cloud Connector < V2.3 affected
Siemens TIA Portal Test Suite V17 < * affected
Siemens TIA Portal Test Suite V18 < * affected
Siemens TIA Portal Test Suite V19 < V19 Update 4 affected
Siemens TIA Portal Test Suite V20 < V20 Update 3 affected
Siemens TIA Project-Server < V2.2 affected
Siemens TIA Project-Server V17 < * affected
Siemens Totally Integrated Automation Portal (TIA Portal) V17 < V17 Update 9 affected
Siemens Totally Integrated Automation Portal (TIA Portal) V18 < V18 Update 6 affected
Siemens Totally Integrated Automation Portal (TIA Portal) V19 < V19 Update 4 affected
Siemens Totally Integrated Automation Portal (TIA Portal) V20 < V20 Update 4 affected
Siemens WinCC Panel Image Setup < V17 Update 9 affected
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2025-30033 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
对搜索路径元素未加控制
来源: CVE Program / CVE List V5
Vulnerability Title
Siemens多款产品 代码问题漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Siemens Automation License Manager是德国西门子（Siemens）公司的一款用于Siemens产品的许可证管理器。 Siemens多款产品存在代码问题漏洞，该漏洞源于容易受到DLL劫持攻击，可能导致执行任意代码。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商 产品 影响版本 CPE 订阅
Siemens Automation License Manager V6.0 0 ~ * -
Siemens Automation License Manager V6.2 0 ~ V6.2 Upd3 -
Siemens CEMAT V10.0 0 ~ * -
Siemens CP PtP Param configuring interface 0 ~ * -
Siemens Create MyConfig (CMC) 0 ~ V6.9 -
Siemens Energy Support Library (EnSL) 0 ~ * -
Siemens FM Configuration Package 0 ~ * -
Siemens Modular PID CTRL Tool 0 ~ * -
Siemens MultiFieldbus Configuration Tool (MFCT) 0 ~ V1.5.5.0 -
Siemens OpenPCS 7 V10.0 0 ~ * -
Siemens OpenPCS 7 V9.1 0 ~ * -
Siemens Siemens Network Planner (SINETPLAN) 0 ~ V2.0 SP2 -
Siemens SIMATIC Automation Tool 0 ~ V5.0 SP4 -
Siemens SIMATIC Automation Tool SDK Windows 0 ~ V5.0 SP4 -
Siemens SIMATIC BATCH V10.0 0 ~ * -
Siemens SIMATIC BATCH V9.1 0 ~ * -
Siemens SIMATIC Control Function Library (CFL) V1.x 0 ~ * -
Siemens SIMATIC Control Function Library (CFL) V2.x 0 ~ * -
Siemens SIMATIC Control Function Library (CFL) V3.x 0 ~ V3.1.0.2 -
Siemens SIMATIC Control Function Library (CFL) V4.x 0 ~ V4.1 -
Siemens SIMATIC D7-SYS 0 ~ V10.0 SP1 -
Siemens SIMATIC eaSie Core Package 0 ~ * -
Siemens SIMATIC eaSie Document Skills 0 ~ * -
Siemens SIMATIC eaSie PCS 7 Skill Package 0 ~ * -
Siemens SIMATIC eaSie Workflow Skills 0 ~ * -
Siemens SIMATIC Energy Suite V17 0 ~ * -
Siemens SIMATIC Energy Suite V18 0 ~ * -
Siemens SIMATIC Energy Suite V19 0 ~ V19 Update 4 -
Siemens SIMATIC Logon V1.6 0 ~ * -
Siemens SIMATIC Logon V2.0 0 ~ V2.0 Upd3 -

二、漏洞 CVE-2025-30033 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2025-30033 的情报信息

请登录查看更多情报信息。

同批安全公告 · Siemens · 2025-08-12 · 共 28 条

CVE-2025-40746 9.1 CRITICAL Siemens SIMATIC RTLS Locating Manager 输入验证错误漏洞
CVE-2025-40743 8.3 HIGH Siemens多款产品 安全漏洞
CVE-2024-54678 8.2 HIGH Siemens多款产品 代码问题漏洞
CVE-2025-40767 7.8 HIGH Siemens SINEC Traffic Analyzer 安全漏洞
CVE-2025-40764 7.8 HIGH Siemens Simcenter Femap 缓冲区错误漏洞
CVE-2025-40762 7.8 HIGH Siemens Simcenter Femap 缓冲区错误漏洞
CVE-2025-40759 7.8 HIGH Siemens多款产品 代码问题漏洞
CVE-2025-40761 7.6 HIGH Siemens多款产品 安全漏洞
CVE-2024-52504 7.5 HIGH Siemens多款产品 代码问题漏洞
CVE-2025-40769 7.4 HIGH Siemens SINEC Traffic Analyzer 安全漏洞
CVE-2025-40770 7.4 HIGH Siemens SINEC Traffic Analyzer 安全漏洞
CVE-2025-40768 7.3 HIGH Siemens SINEC Traffic Analyzer 信息泄露漏洞
CVE-2024-41979 7.1 HIGH Siemens多款产品 安全漏洞
CVE-2024-41986 6.4 MEDIUM Siemens多款产品 加密问题漏洞
CVE-2025-40751 6.3 MEDIUM Siemens SIMATIC RTLS Locating Manager 安全漏洞
CVE-2025-30034 6.2 MEDIUM Siemens SIMATIC RTLS Locating Manager 安全漏洞
CVE-2025-40753 6.2 MEDIUM Siemens POWER METER SICAM Q100和Siemens POWER METER SICAM Q200 安全漏洞
CVE-2025-40752 6.2 MEDIUM Siemens POWER METER SICAM Q100和Siemens POWER METER SICAM Q200 安全漏洞
CVE-2025-40766 5.5 MEDIUM Siemens SINEC Traffic Analyzer 资源管理错误漏洞
CVE-2025-40584 5.5 MEDIUM Siemens多款产品 代码问题漏洞

显示前 20 条，共 28 条。 查看全部 &rarr; →

IV. Related Vulnerabilities

Same vendor: Siemens
Same weakness: CWE-427

V. Comments for CVE-2025-30033

暂无评论

发表评论