https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:07:37.007678+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-30033 CVE-2025-30033 2026-10-02T11:07:37.023558+00:00

Affected: Siemens Automation License Manager V6.0, Siemens Automation License Manager V6.2, Siemens CEMAT V10.0, Siemens CP PtP Param configuring interface, Siemens Create MyConfig (CMC), Siemens Energy Support Library (EnSL), Siemens FM Configuration Package, Siemens Modular PID CTRL Tool, Siemens MultiFieldbus Configuration Tool (MFCT), Siemens OpenPCS 7 V10.0 and 129 more

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

 https://cve.radiocsirt.org/vuln/ssa-282044 SSA-282044 — SSA-282044: DLL Hijacking Vulnerability in Siemens Web Installer used by the Online Software Delivery 2026-10-02T11:07:37.023786+00:00

The installers used to install several Siemens products are affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected installer component. This vulnerability poses a risk only during setup and installation phase of the affected applications downloaded e.g. via OSD (Online Software Delivery).

Siemens has released new versions for several affected products and recommends using the latest versions during setup and installation. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.