IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SSA-282044: DLL Hijacking Vulnerability in Siemens Web Installer used by the Online Software Delivery

HIGH
CVSS 7.8
Date 2026-08-11T00:00:00+00:00
Source siemens-productcert
Published by Siemens ProductCERT

// Description

The installers used to install several Siemens products are affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected installer component. This vulnerability poses a risk only during setup and installation phase of the affected applications downloaded e.g. via OSD (Online Software Delivery). Siemens has released new versions for several affected products and recommends using the latest versions during setup and installation. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2025-30033 7.8 high
CVE-2025-30033. The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

// Affected Products (44)

Vendor Product Asset Type Purdue Level Firmware
Siemens Unknown historian
L3
--
Siemens Unknown plc
L1
--
Siemens Unknown historian
L3
--
Siemens Unknown plc
L1
--
Siemens Unknown plc
L1
--
Siemens Unknown plc
L1
--
Siemens Unknown historian
L3
--
Siemens Unknown hmi
L2
--
Siemens Unknown plc
L1
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown plc
L1
--
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown plc
L1
--
Siemens Unknown plc
L1
--
Siemens Unknown hmi
L2
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown plc
L1
--
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--
Siemens Unknown plc
L1
--
Siemens Unknown hmi
L2
--
Siemens Unknown plc
L1
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown hmi
L2
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--
Siemens Unknown engineering_workstation
L3
--
Siemens Unknown hmi
L2
--

// Remediations (100)

Patch: Update to V6.0 SP3 or later version
Update to V6.0 SP3 or later version
Patch: Update to V4.1 or later version
Update to V4.1 or later version
Patch: Update to V21 or later version
Update to V21 or later version
Patch: Update to V20.0 Update 1 or later version
Update to V20.0 Update 1 or later version
Mitigation: Install applications only from an empty directory, thereby minimizing the likelihood of malicious DL
Install applications only from an empty directory, thereby minimizing the likelihood of malicious DLLs being present
Patch: Update to V5.0.0.1 or later version
Update to V5.0.0.1 or later version
Patch: Update to V17 Update 9 or later version
Update to V17 Update 9 or later version
Mitigation: Harden the application host to prevent local access by untrusted personnel
Harden the application host to prevent local access by untrusted personnel
Patch: Update to V10.0 SP1 or later version
Update to V10.0 SP1 or later version
Patch: Update to V10.0 SP1 UC01 or later version
Update to V10.0 SP1 UC01 or later version
Patch: Update to V8.1 Update 3 or later version
Update to V8.1 Update 3 or later version
Patch: Update to V9.1 Upd8 or later version
Update to V9.1 Upd8 or later version
Patch: Update to V7.0 Update 1 or later version
Update to V7.0 Update 1 or later version
Patch: Update to V4.0 or later version
Update to V4.0 or later version
Patch: Update to V2.1 or later version
Update to V2.1 or later version
Patch: Update to V1.5.5.0 or later version
Update to V1.5.5.0 or later version
Patch: Update to V5.0 SP4 or later version
Update to V5.0 SP4 or later version
Patch: Update to V3.1.0.2 or later version
Update to V3.1.0.2 or later version
Patch: Update to V10.0 SP1 Upd2 or later version
Update to V10.0 SP1 Upd2 or later version
Patch: Update to V9.1 SP2 Upd4 or later version
Update to V9.1 SP2 Upd4 or later version
Patch: Update to V9.1 SP2 Upd8 or later version
Update to V9.1 SP2 Upd8 or later version
Patch: Update to V31.1.5 or later version
Update to V31.1.5 or later version
Patch: Update to V3.1.2.2 or later version
Update to V3.1.2.2 or later version
Patch: Update to V5.0 SP4 or later version
Update to V5.0 SP4 or later version
Patch: Update to V9.1 SP2 Upd6 or later version
Update to V9.1 SP2 Upd6 or later version
Patch: Update to V2.3 or later version
Update to V2.3 or later version
Patch: Update to V6.0 SP3 or later version
Update to V6.0 SP3 or later version
Patch: Update to V20 Update 4 or later version
Update to V20 Update 4 or later version
Patch: Update to V2.2 or later version
Update to V2.2 or later version
Patch: Update to V6.2 Upd3 or later version
Update to V6.2 Upd3 or later version
Patch: Update to V4.0.1 or later version
Update to V4.0.1 or later version
Patch: Update to V9.1 SP1 UC08 or later version
Update to V9.1 SP1 UC08 or later version
Patch: Update to V7.5 SP2 Update 20 or later version
Update to V7.5 SP2 Update 20 or later version
Patch: Update to V2.0 Upd3 or later version
Update to V2.0 Upd3 or later version
Patch: Update to V8.0 Update 8 or later version
Update to V8.0 Update 8 or later version
Patch: Update to V20 Update 3 or later version
Update to V20 Update 3 or later version
Patch: Update to V20 or later version
Update to V20 or later version
Patch: Update to V9.3 SP1 Upd2 or later version
Update to V9.3 SP1 Upd2 or later version
Patch: Update to V4.1.0.1 or later version
Update to V4.1.0.1 or later version
Patch: Update to V19 Update 4 or later version
Update to V19 Update 4 or later version
Patch: Update to V9.1 SP1 Upd8 or later version
Update to V9.1 SP1 Upd8 or later version
Patch: Update to V9.1 SP2 Upd2 or later version
Update to V9.1 SP2 Upd2 or later version
Patch: Update to V6.9 or later version
Update to V6.9 or later version
Patch: Update to V20 or later version
Update to V20 or later version
Patch: Update to V3.5 SP4 Update 1 or later version
Update to V3.5 SP4 Update 1 or later version
Patch: Update to V3.0.6 or later version
Update to V3.0.6 or later version
Patch: Update to V6.0 SP1 or later version
Update to V6.0 SP1 or later version
Patch: Update to V20 Update 1 or later version
Update to V20 Update 1 or later version
Patch: Update to V17 Update 9 or later version
Update to V17 Update 9 or later version
Patch: Update to V2024 SP1 Upd2 or later version
Update to V2024 SP1 Upd2 or later version
Patch: Update to V17 Update 9 or later version
Update to V17 Update 9 or later version
Patch: Update to V9.1 SP2 Upd6 or later version
Update to V9.1 SP2 Upd6 or later version
Patch: Update to V9.3 SP1 Upd2 or later version
Update to V9.3 SP1 Upd2 or later version
Patch: Update to V9.1 SP2 Upd8 or later version
Update to V9.1 SP2 Upd8 or later version
Patch: Update to V9.1 SP1 UC08 or later version
Update to V9.1 SP1 UC08 or later version
Patch: Update to V7.0 Update 1 or later version
Update to V7.0 Update 1 or later version
Patch: Update to V4.0 or later version
Update to V4.0 or later version
Mitigation: Harden the application host to prevent local access by untrusted personnel
Harden the application host to prevent local access by untrusted personnel
Patch: Update to V20 Update 3 or later version
Update to V20 Update 3 or later version
Patch: Update to V5.0.0.1 or later version
Update to V5.0.0.1 or later version
Patch: Update to V31.1.5 or later version
Update to V31.1.5 or later version
Patch: Update to V2.2 or later version
Update to V2.2 or later version
Patch: Update to V17 Update 9 or later version
Update to V17 Update 9 or later version
Mitigation: Install applications only from an empty directory, thereby minimizing the likelihood of malicious DL
Install applications only from an empty directory, thereby minimizing the likelihood of malicious DLLs being present
Patch: Update to V6.2 Upd3 or later version
Update to V6.2 Upd3 or later version
Patch: Update to V17 Update 9 or later version
Update to V17 Update 9 or later version
Patch: Update to V21 or later version
Update to V21 or later version
Patch: Update to V2.1 or later version
Update to V2.1 or later version
Patch: Update to V9.1 Upd8 or later version
Update to V9.1 Upd8 or later version
Patch: Update to V9.1 SP2 Upd4 or later version
Update to V9.1 SP2 Upd4 or later version
Patch: Update to V8.0 Update 8 or later version
Update to V8.0 Update 8 or later version
Patch: Update to V4.1 or later version
Update to V4.1 or later version
Patch: Update to V6.9 or later version
Update to V6.9 or later version
Patch: Update to V10.0 SP1 UC01 or later version
Update to V10.0 SP1 UC01 or later version
Patch: Update to V3.1.2.2 or later version
Update to V3.1.2.2 or later version
Patch: Update to V2024 SP1 Upd2 or later version
Update to V2024 SP1 Upd2 or later version
Patch: Update to V20 Update 1 or later version
Update to V20 Update 1 or later version
Patch: Update to V9.1 SP1 Upd8 or later version
Update to V9.1 SP1 Upd8 or later version
Patch: Update to V4.0.1 or later version
Update to V4.0.1 or later version
Patch: Update to V1.5.5.0 or later version
Update to V1.5.5.0 or later version
Patch: Update to V3.5 SP4 Update 1 or later version
Update to V3.5 SP4 Update 1 or later version
Patch: Update to V4.1.0.1 or later version
Update to V4.1.0.1 or later version
Patch: Update to V7.5 SP2 Update 20 or later version
Update to V7.5 SP2 Update 20 or later version
Patch: Update to V2.0 Upd3 or later version
Update to V2.0 Upd3 or later version
Patch: Update to V9.1 SP1 Upd8 or later version
Update to V9.1 SP1 Upd8 or later version
Patch: Update to V9.1 SP2 Upd2 or later version
Update to V9.1 SP2 Upd2 or later version
Patch: Update to V20.0 Update 1 or later version
Update to V20.0 Update 1 or later version
Patch: Update to V20 or later version
Update to V20 or later version
Patch: Update to V17 Update 9 or later version
Update to V17 Update 9 or later version
Patch: Update to V20 or later version
Update to V20 or later version
Patch: Update to V19 Update 4 or later version
Update to V19 Update 4 or later version
Patch: Update to V17 Update 9 or later version
Update to V17 Update 9 or later version
Patch: Update to V10.0 SP1 Upd2 or later version
Update to V10.0 SP1 Upd2 or later version
Patch: Update to V20 Update 4 or later version
Update to V20 Update 4 or later version
Patch: Update to V6.0 SP1 or later version
Update to V6.0 SP1 or later version
Patch: Update to V3.0.6 or later version
Update to V3.0.6 or later version
Patch: Update to V8.1 Update 3 or later version
Update to V8.1 Update 3 or later version
Patch: Update to V17 Update 9 or later version
Update to V17 Update 9 or later version
Patch: Update to V2.3 or later version
Update to V2.3 or later version
Patch: Update to V3.1.0.2 or later version
Update to V3.1.0.2 or later version

// References