Skip to content
OpenAdvisories
Critical VDE-2020-033 6 CVEs

Pilz: Multiple products prone to WIBU-SYSTEMS CodeMeter vulnerabilities

Published Sep 10, 2020 · Updated May 14, 2025 · Revision 3

Vendor: Pilz Vendor: Wibu Product: codemeter-runtime Product: CODESYS DevSys Product: Live Video Server Product: PAS4000 Product: PASloto Product: PASvisu Product: PNOZsigma Product: SafetyEYE

Summary

A number of Pilz software tools use the Software CodeMeter Runtime application from WIBU-SYSTEMS AG to manage licences. This application contains a number of vulnerabilities, which enable an attacker to change and falsify a licence file, prevent normal operation of Code- Meter (Denial-of-Service) and potentially execute arbitrary code.

Details

Impact
The stated Pilz products are supplied with the WIBU Software CodeMeter Runtime Software in Ver- sions lower than v6.90, which contain a number of vulnerabilities. One of the vulnerabilities enables further vulnerabilities to be exploited via the network.

Remediation
Use the current Version 7.10 of the Software CodeMeter Runtime, available via the manufacturer's website. https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html
Only use the Software CodeMeter Runtime as Client. The software tools named under affected products use the Software CodeMeter Runtime as Client in their default setting.
Pilz also recommends using a local firewall to limit unwanted access to the network ser- vices of the device with Software CodeMeter Runtime installed.

Vulnerabilities 6

  • High 8.2
    CVE-2020-12499

    PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.

    In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files.

    Phoenix Contact PLCnext Engineer ICS / OT
  • Unscored —
    CVE-2020-14513

    CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted lice…

  • Unscored —
    CVE-2020-14515

    CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in…

  • Unscored —
    CVE-2020-14517

    Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90…

  • Unscored —
    CVE-2020-14519

    This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are …

  • Unscored —
    CVE-2020-16233

    An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back pack…

Revision history

  1. #3

    Fix: version space, removed ia, firmware category, added distribution

  2. #2

    Fix: correct certvde domain, added self-reference

  3. #1

    Initial revision.

References