PT-2025-21591 · Wibu · Wibu Codemeter

Mateusz Gierblinski · Published 2025-05-16 · Updated 2026-01-13 · CVE-2025-47809

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Wibu CodeMeter versions prior to 8.30a

Description: The issue allows for privilege escalation immediately after installation, before a logoff or reboot, under specific conditions. These conditions include an unprivileged installation with UAC and the presence of the CodeMeter Control Center component without it having been restarted. In this scenario, a local user can exploit the issue by navigating from Import License to a privileged instance of Windows Explorer, thus gaining elevated privileges.

Recommendations: For versions prior to 8.30a, update to version 8.30a or later to resolve the issue. As a temporary workaround, consider restarting the CodeMeter Control Center component after installation to minimize the risk of exploitation.

Fix

LPE

Weakness Enumeration

CWE-272

Related Identifiers

CVE-2025-47809

Affected Products

Wibu Codemeter

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-47809 · Security Note
• https://twitter.com/CVEnew/status/1923235065540096016 · Twitter Post
• https://twitter.com/cbh_security/status/2010988444281962884 · Twitter Post
• https://t.me/cvetracker/23971 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1923204535285064086 · Twitter Post
• https://twitter.com/windowsforum/status/1956050115044458698 · Twitter Post
• https://wibu.com/support/security-advisories/wibu-100120.html · Note
• https://t.me/latest_high_impact_cve/2373 · Telegram Post
• https://t.me/cvenotify/122464 · Telegram Post
• https://twitter.com/cracbot/status/1925144586613313607 · Twitter Post