DeviceCare

Latest advisories

• Critical max 9.8
  VDE-2025-105 1 CVE

  Endress+Hauser: Multiple products affected by Wibu-Systems CodeMeter Vulnerability

  A vulnerability in Wibu-Systems CodeMeter (up to version 7.60b) affects multiple Endress+Hauser products. This flaw can lead to a heap buffer overflow, which may allow remote code execution under certain conditions.

  Endress+Hauser
  Dec 8, 2025
• Critical
  VDE-2020-031 6 CVEs rev. 4

  Endress+Hauser: Multiple products prone to WIBU CodeMeter vulnerabilities

  For further Information please refer to WIBU Advisories directly at https://wibu.com/support/security-advisories.html and the aforementioned CVE-IDs.

  Endress+Hauser Wibu
  May 14, 2025

  first Oct 27, 2020
• Critical max 5.6
  VDE-2021-044 1 CVE rev. 3

  Endress+Hauser: Multiple products affected by log4net vulnerability

  Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

  Endress+Hauser
  May 14, 2025

  first Jan 20, 2022
• High max 7.3
  VDE-2021-005 1 CVE rev. 2

  Endress+Hauser: Multiple Devices affected by fdtContainer vulnerability

  The fdtCONTAINER component is integrated into an application (host application). The fdtCONTAINER application is a specific host application which integrates the fdtCONTAINER component. The fdtCONTAINER component exchanges binary data blobs with such a host a…

  Endress+Hauser
  May 14, 2025

  first Mar 1, 2021
• Critical max 6.5
  VDE-2022-019 8 CVEs

  Endress+Hauser: Multiple products utilizing vulnerable WIBU-SYSTEMS CodeMeter components

  For detailed information please refer to WIBU SYSTEMS original Advisories at https://wibu.com/support/security-advisories.html.

  Endress+Hauser
  Jun 2, 2022