Skip to content
OpenAdvisories
High SSA-201595 1 CVE

SSA-201595: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting the Desigo CC Product Family and SENTRON Powermanager

Published Aug 14, 2025 · Updated Mar 10, 2026 · Revision 4

Vendor: Siemens Product: Desigo CC family V5.0 Product: Desigo CC family V5.1 Product: Desigo CC family V6 Product: Desigo CC family V7 Product: Desigo CC family V8 Product: SENTRON Powermanager V5 Product: SENTRON Powermanager V6 Product: SENTRON Powermanager V7 Product: SENTRON Powermanager V8

Summary

Versions V5.0 through V8 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems CodeMeter Runtime. Successful exploitation of this vulnerability could allow privilege escalation.

Siemens has released instructions how to update the CodeMeter Runtime component and recommends to apply the update on affected systems.

Vulnerabilities 1

  • High 8.2
    CVE-2025-47809

    Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or re…

    Wibu CodeMeter

Revision history

  1. #4

    Added the fix version for Sentron Powermanager V8.0

  2. #3

    Added the fix version for Desigo CC V8.0

  3. #2

    Clarified that updating WIBU CodeMeter to a later version than V8.30a (currently available: V8.40) will also fix the issue

  4. #1

    Publication Date

References