The vulnerability identified as CVE-2025-30033 affects the setup component of Siemens Automation License Manager V6.0. It is categorized as CWE-427, indicating an uncontrolled search path element vulnerability. This weakness enables DLL hijacking, where an attacker can place a malicious DLL in a location that the setup component searches before the legitimate DLL, causing arbitrary code execution with the privileges of the installing user. Exploitation requires local access and user interaction (installation by a legitimate user). The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to execute arbitrary code with the privileges of the user performing the installation, potentially leading to full system compromise including confidentiality, integrity, and availability impacts. The attack vector is local with low attack complexity and no privileges required, but user interaction is necessary.

No patch or official remediation information is currently available for this vulnerability. Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. Until a fix is provided, users should exercise caution when installing applications that use the affected setup component and restrict local access to trusted users.