Description
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Automation License Manager V6.0 | — | — |
| Siemens | Automation License Manager V6.2 | < V6.2 Upd3 | V6.2 Upd3 |
| Siemens | CEMAT V10.0 | — | — |
| Siemens | CP PtP Param configuring interface | — | — |
| Siemens | Create MyConfig (CMC) | < V6.9 | V6.9 |
| Siemens | Energy Support Library (EnSL) | — | — |
| Siemens | FM Configuration Package | — | — |
| Siemens | Modular PID CTRL Tool | — | — |
| Siemens | MultiFieldbus Configuration Tool (MFCT) | < V1.5.5.0 | V1.5.5.0 |
| Siemens | OpenPCS 7 V10.0 | — | — |
| Siemens | OpenPCS 7 V9.1 | — | — |
| Siemens | Siemens Network Planner (SINETPLAN) | < V2.0 SP2 | V2.0 SP2 |
| Siemens | SIMATIC Automation Tool | < V5.0 SP4 | V5.0 SP4 |
| Siemens | SIMATIC Automation Tool SDK Windows | < V5.0 SP4 | V5.0 SP4 |
| Siemens | SIMATIC BATCH V10.0 | — | — |
| Siemens | SIMATIC BATCH V9.1 | — | — |
| Siemens | SIMATIC Control Function Library (CFL) V1.x | — | — |
| Siemens | SIMATIC Control Function Library (CFL) V2.x | — | — |
| Siemens | SIMATIC Control Function Library (CFL) V3.x | < V3.1.0.2 | V3.1.0.2 |
| Siemens | SIMATIC Control Function Library (CFL) V4.x | < V4.1 | V4.1 |
| Siemens | SIMATIC D7-SYS | < V10.0 SP1 | V10.0 SP1 |
| Siemens | SIMATIC eaSie Core Package (6DL5424-0AX00-0AV8) | — | — |
| Siemens | SIMATIC eaSie Document Skills V26 | — | — |
| Siemens | SIMATIC eaSie PCS 7 Skill Package V26 (6DL5424-0BX00-0AV8) | — | — |
| Siemens | SIMATIC eaSie Workflow Skills V26 | — | — |
| Siemens | SIMATIC Energy Suite V17 | — | — |
| Siemens | SIMATIC Energy Suite V18 | — | — |
| Siemens | SIMATIC Energy Suite V19 | < V19 Update 4 | V19 Update 4 |
| Siemens | SIMATIC Logon V1.6 | — | — |
| Siemens | SIMATIC Logon V2.0 | < V2.0 Upd3 | V2.0 Upd3 |
| Siemens | SIMATIC Management Agent | < V9.1 SP1 Upd8 | V9.1 SP1 Upd8 |
| Siemens | SIMATIC Management Console | < V9.1 SP1 Upd8 | V9.1 SP1 Upd8 |
| Siemens | SIMATIC MTP CREATOR V2.x | < V2.1 | V2.1 |
| Siemens | SIMATIC MTP CREATOR V3.x | — | — |
| Siemens | SIMATIC MTP CREATOR V4.x | < V4.1.0.1 | V4.1.0.1 |
| Siemens | SIMATIC MTP CREATOR V5.x | < V5.0.0.1 | V5.0.0.1 |
| Siemens | SIMATIC MTP Integrator V1.x | — | — |
| Siemens | SIMATIC MTP Integrator V2.x | — | — |
| Siemens | SIMATIC NET PC Software V16 | — | — |
| Siemens | SIMATIC NET PC Software V17 | — | — |
| Siemens | SIMATIC NET PC Software V18 | — | — |
| Siemens | SIMATIC NET PC Software V19 | — | — |
| Siemens | SIMATIC NET PC Software V20 | < V20.0 Update 1 | V20.0 Update 1 |
| Siemens | SIMATIC ODK 1500S | — | — |
| Siemens | SIMATIC PCS 7 Advanced Process Faceplates V9.1 | < V9.1 SP2 Upd4 | V9.1 SP2 Upd4 |
| Siemens | SIMATIC PCS 7 Advanced Process Functions V2.1 | — | — |
| Siemens | SIMATIC PCS 7 Advanced Process Functions V2.2 | — | — |
| Siemens | SIMATIC PCS 7 Advanced Process Graphics V10.0 | — | — |
| Siemens | SIMATIC PCS 7 Advanced Process Graphics V9.1 | — | — |
| Siemens | SIMATIC PCS 7 Advanced Process Library incl. Faceplates V10.0 | — | — |
| Siemens | SIMATIC PCS 7 Advanced Process Library V9.1 | < V9.1 SP2 Upd6 | V9.1 SP2 Upd6 |
| Siemens | SIMATIC PCS 7 Basis Faceplates V9.1 | < V9.1 SP2 Upd2 | V9.1 SP2 Upd2 |
| Siemens | SIMATIC PCS 7 Basis Library V10.0 | < V10.0 SP1 Upd2 | V10.0 SP1 Upd2 |
| Siemens | SIMATIC PCS 7 Basis Library V9.1 | < V9.1 SP2 Upd8 | V9.1 SP2 Upd8 |
| Siemens | SIMATIC PCS 7 Industry Library V10.0 | — | — |
| Siemens | SIMATIC PCS 7 Industry Library V9.0 | — | — |
| Siemens | SIMATIC PCS 7 Industry Library V9.1 | — | — |
| Siemens | SIMATIC PCS 7 Logic Matrix V10.0 | — | — |
| Siemens | SIMATIC PCS 7 Logic Matrix V9.1 | < V9.1 Upd8 | V9.1 Upd8 |
| Siemens | SIMATIC PCS 7 MPC Configurator | — | — |
| Siemens | SIMATIC PCS 7 PowerControl V9.1 | — | — |
| Siemens | SIMATIC PCS 7 Standard Chemical Library V10.0 | — | — |
| Siemens | SIMATIC PCS 7 Standard Chemical Library V9.1 | — | — |
| Siemens | SIMATIC PCS 7 TeleControl V9.1 | — | — |
| Siemens | SIMATIC PCS 7 V10.0 | < V10.0 SP1 UC01 | V10.0 SP1 UC01 |
| Siemens | SIMATIC PCS 7 V9.1 | < V9.1 SP1 UC08 | V9.1 SP1 UC08 |
| Siemens | SIMATIC PCS 7/OPEN OS V9.1 | — | — |
| Siemens | SIMATIC PCS neo V5.0 | — | — |
| Siemens | SIMATIC PCS neo V6.0 | < V6.0 SP1 | V6.0 SP1 |
| Siemens | SIMATIC PDM Maintenance Station V5.0 | — | — |
| Siemens | SIMATIC PDM V9.2 | — | — |
| Siemens | SIMATIC PDM V9.3 | < V9.3 SP1 Upd2 | V9.3 SP1 Upd2 |
| Siemens | SIMATIC Process Function Library (PFL) V4.0 | — | — |
| Siemens | SIMATIC Process Historian 2020 | — | — |
| Siemens | SIMATIC Process Historian 2022 | — | — |
| Siemens | SIMATIC Process Historian 2024 | < V2024 SP1 Upd2 | V2024 SP1 Upd2 |
| Siemens | SIMATIC ProSave V17 | < V17 Update 9 | V17 Update 9 |
| Siemens | SIMATIC ProSave V18 | — | — |
| Siemens | SIMATIC ProSave V19 | < V19 Update 4 | V19 Update 4 |
| Siemens | SIMATIC ProSave V20 | — | — |
| Siemens | SIMATIC Route Control V10.0 | — | — |
| Siemens | SIMATIC Route Control V9.1 | — | — |
| Siemens | SIMATIC S7 F Systems V6.3 | — | — |
| Siemens | SIMATIC S7 F Systems V6.4 | — | — |
| Siemens | SIMATIC S7-1500 Software Controller V2 | — | — |
| Siemens | SIMATIC S7-1500 Software Controller V3 | < V31.1.5 | V31.1.5 |
| Siemens | SIMATIC S7-Fail-safe Configuration Tool (S7-FCT) | < V4.0.1 | V4.0.1 |
| Siemens | SIMATIC S7-PCT | < V3.5 SP4 Update 1 | V3.5 SP4 Update 1 |
| Siemens | SIMATIC S7-PLCSIM Advanced | < V7.0 Update 1 | V7.0 Update 1 |
| Siemens | SIMATIC S7-PLCSIM V17 | — | — |
| Siemens | SIMATIC S7-PLCSIM V18 | — | — |
| Siemens | SIMATIC S7-PLCSIM V19 | — | — |
| Siemens | SIMATIC S7-PLCSIM V20 | < V20 Update 1 | V20 Update 1 |
| Siemens | SIMATIC Safety Matrix V6.3 | — | — |
| Siemens | SIMATIC STEP 7 CFC V19 | — | — |
| Siemens | SIMATIC STEP 7 CFC V20 | — | — |
| Siemens | SIMATIC STEP 7 V5.7 | — | — |
| Siemens | SIMATIC Target | < V6.0 SP3 | V6.0 SP3 |
| Siemens | SIMATIC WinCC flexible ES | — | — |
| Siemens | SIMATIC WinCC Runtime Advanced | < V17 Update 9 | V17 Update 9 |
Advisories 5
- SSA-282044 SSA-282044: DLL Hijacking Vulnerability in Siemens Web Installer used by the Online Software Delivery Siemens ProductCERT · Nov 10, 2026
- ICSA-25-226-22 Siemens Web Installer CISA ICS & IT advisories · Sep 15, 2026
- NCSC-2026-0346 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Sep 8, 2026
- WID-SEC-2025-1771 Mehrere Siemens-Produkte: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Aug 12, 2025
- NCSC-2025-0246 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 12, 2025