Description
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wibu | CodeMeter | < 8.30a | 8.30a |
Advisories 11
- ICSA-25-226-05 Siemens IAM Client CISA ICS & IT advisories · Sep 15, 2026
- NCSC-2026-0346 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Sep 8, 2026
- SSA-331739 SSA-331739: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting Siemens Products Siemens ProductCERT · Sep 8, 2026
- ICSA-25-231-02 Siemens Mendix SAML Module CISA ICS & IT advisories · Mar 12, 2026
- SSA-201595 SSA-201595: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting the Desigo CC Product Family and SENTRON Powermanager Siemens ProductCERT · Mar 10, 2026
- VDE-2026-007 TRUMPF: Multiple products affected by Wibu CodeMeter vulnerability CERT@VDE · Feb 23, 2026
- SCA-2025-0014 CodeMeter vulnerablity affects SICK CODE-LOC and SICK LIDAR-LOC SICK PSIRT · Nov 3, 2025
- VDE-2025-064 Phoenix Contact: Products utilizing WIBU-SYSTEMS CodeMeter Runtime Windows Installer have a privilege escalation CERT@VDE · Sep 9, 2025
- ICSA-25-231-01 Siemens Desigo CC Product Family and SENTRON Powermanager CISA ICS & IT advisories · Aug 14, 2025
- WID-SEC-2025-1076 Wibu-Systems CodeMeter: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Aug 12, 2025
- NCSC-2025-0246 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 12, 2025