Desigo CC family V7 vulnerabilities

2 known vulnerabilities in Desigo CC family V7 from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  OpenSSL: Out-of-bounds Write

  CVE-2025-15467Jan 27, 2026OpenSSLEPSS 74.8%

  Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote co

• 8.2 High severity

  CodeMeter: Least Privilege Violation

  CVE-2025-47809May 16, 2025Wibu

  Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be insta