Skip to content
OpenAdvisories
High ICSA-25-231-02 1 CVE

Siemens Mendix SAML Module

Published Aug 14, 2025 · Updated Mar 12, 2026 · Revision 7

Vendor: Siemens Product: Desigo CC family V5.0 Product: Desigo CC family V5.1 Product: Desigo CC family V6 Product: Desigo CC family V7 Product: Desigo CC family V8 Product: SENTRON Powermanager V5 Product: SENTRON Powermanager V6 Product: SENTRON Powermanager V7 Product: SENTRON Powermanager V8

Summary

Versions V5.0 through V8 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems CodeMeter Runtime. Successful exploitation of this vulnerability could allow privilege escalation.

Siemens has released instructions how to update the CodeMeter Runtime component and recommends to apply the update on affected systems.

Vulnerabilities 1

  • High 8.2
    CVE-2025-47809

    Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or re…

    Wibu CodeMeter

Revision history

  1. #6

    CISA Republication update based on Siemens ProductCERT SSA-201595 advisory

  2. #7

    CISA Republication update based on Siemens ProductCERT SSA-201595 advisory

  3. #5

    Added the fix version for Sentron Powermanager V8.0

  4. #4

    CISA Republication - Initial Republication of Siemens ProductCERT SSA-201595 advisory

  5. #3

    Added the fix version for Desigo CC V8.0

  6. #2

    Clarified that updating WIBU CodeMeter to a later version than V8.30a (currently available: V8.40) will also fix the issue

  7. #1

    Publication Date

References