CVE-2025-47809 - CVE House
Back to Database
Status published High CVE-2025-47809

Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after...

Vulnerability Description

Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-47809

Credits & Attribution

No credits recorded in the NVD database.

References

More from Wibu

View All →
CVE-2023-3935
Wibu: Buffer Overflow in CodeMeter Runtime
Critical 9.8
CVE-2021-47810
WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path
High 8.5
CVE-2020-37017
CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path
High 8.5

Affected Vendor

Affected Software

CodeMeter
Vulnerable Versions:
0

Timeline

Official Publish: May 16th, 2025
Last Modified: May 16th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-272

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.