Description
Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | CodeMeter | All versions prior to 7.10 | — |
Advisories 13
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- VDE-2020-031 Endress+Hauser: Multiple products prone to WIBU CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-039 TRUMPF: Multiple products prone to WIBU CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-032 WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT CERT@VDE · May 14, 2025
- VDE-2020-041 Weidmueller: u-create studio < 1.20.2 affected by WIBU-SYSTEMS CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2021-055 Pilz: PMC programming tool 2.x.x affected by multiple vulnerabilities CERT@VDE · Apr 26, 2022
- VDE-2021-061 Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities CERT@VDE · Apr 26, 2022
- ICSA-20-203-01 Wibu-Systems CodeMeter (Update F) CISA ICS & IT advisories · Mar 10, 2022
- SSA-455843 SSA-455843: WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products Siemens ProductCERT · Feb 17, 2022
- SEVD-2020-287-02 Wibu-Systems CodeMeter Vulnerabilities Schneider Electric CPCERT · Dec 8, 2020
- VDE-2020-034 Pepperl+Fuchs: VMT MSS and VMT IS - Several vulnerabilities in products utilizing WIBU-SYSTEMS CodeMeter components CERT@VDE · Sep 10, 2020
- VDE-2020-030 PHOENIX CONTACT: Products utilizing WIBU-SYSTEMS CodeMeter components CERT@VDE · Sep 9, 2020