Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in multiple products

### FluidDraw P5, FluidDraw P6

Avoid any FluidDraw installation with a FluidDraw installation package below version 6.2c.
Updated versions of FluidDraw are available on the Festo website.

In case of a FluidDraw installation package with a version below 6.2c:

- **Do not use** the WIBU CodeMeter package that is part of the FluidDraw installation package.
- Skip the CodeMeter installation step during the FluidDraw installation.
- Instead, use a current CodeMeter version from the WIBU website and install it separately.
- In case of an already installed vulnerable CodeMeter version, update all these WIBU CodeMeter installations with the current version of WIBU CodeMeter.

> Please refer to the WIBU CodeMeter documentation and website for further details and mitigations on usage of WIBU CodeMeter Runtime before 7.30a.

---

### CIROS

For future installations:

- Use a CIROS installer downloaded from [https://ip.festo-didactic.com/](https://ip.festo-didactic.com/)
- Make sure it is downloaded **after September 15, 2022**

For existing installations:

- Update the WIBU CodeMeter Runtime separately to at least **version 7.30a** (downloaded from the WIBU Systems website).
- Refer to the WIBU CodeMeter documentation and website for further details and mitigations.

---

## MES PC

If your copy of MES4 came preinstalled on a PC shipped **before December 2022**:

- Ensure the PC has at least **CodeMeter Runtime 7.30a** installed.
- If necessary, download the update from the WIBU Systems website.

---

### Additional to the above

Festo strongly recommends:

- Restricting **unprivileged access** to machines running Festo software.
- Minimizing and protecting **network access** to connected devices using state-of-the-art techniques and processes.

> For secure operation, follow the recommendations in the product manuals.