Description
Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server) and the server accepts external connections, which may allow an attacker to remotely communicate with the CodeMeter API.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | CodeMeter | All versions prior to 6.90, including Version 6.90 or newer only if CodeMeter Runtime is running as server. | — |
Advisories 13
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- VDE-2020-031 Endress+Hauser: Multiple products prone to WIBU CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-039 TRUMPF: Multiple products prone to WIBU CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-033 Pilz: Multiple products prone to WIBU-SYSTEMS CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-032 WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT CERT@VDE · May 14, 2025
- VDE-2020-041 Weidmueller: u-create studio < 1.20.2 affected by WIBU-SYSTEMS CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2021-061 Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities CERT@VDE · Apr 26, 2022
- VDE-2021-055 Pilz: PMC programming tool 2.x.x affected by multiple vulnerabilities CERT@VDE · Apr 26, 2022
- ICSA-20-203-01 Wibu-Systems CodeMeter (Update F) CISA ICS & IT advisories · Mar 10, 2022
- SSA-455843 SSA-455843: WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products Siemens ProductCERT · Feb 17, 2022
- SEVD-2020-287-02 Wibu-Systems CodeMeter Vulnerabilities Schneider Electric CPCERT · Dec 8, 2020
- VDE-2020-034 Pepperl+Fuchs: VMT MSS and VMT IS - Several vulnerabilities in products utilizing WIBU-SYSTEMS CodeMeter components CERT@VDE · Sep 10, 2020