Description
This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected WebSockets API still enabled. This is especially relevant for systems or devices where a web browser is used to access a web server) via a specifically crafted Java Script payload, which may allow alteration or creation of license files for when combined with CVE-2020-14515.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | CodeMeter | All versions prior to 7.00, including Version 7.0 or newer with the affected WebSockets API still enabled. This is especially relevant for systems or devices where a web browser is used to access a web server. | — |
Advisories 14
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- VDE-2020-031 Endress+Hauser: Multiple products prone to WIBU CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-039 TRUMPF: Multiple products prone to WIBU CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-033 Pilz: Multiple products prone to WIBU-SYSTEMS CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-032 WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT CERT@VDE · May 14, 2025
- VDE-2020-041 Weidmueller: u-create studio < 1.20.2 affected by WIBU-SYSTEMS CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2021-055 Pilz: PMC programming tool 2.x.x affected by multiple vulnerabilities CERT@VDE · Apr 26, 2022
- VDE-2021-061 Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities CERT@VDE · Apr 26, 2022
- ICSA-20-203-01 Wibu-Systems CodeMeter (Update F) CISA ICS & IT advisories · Mar 10, 2022
- SSA-455843 SSA-455843: WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products Siemens ProductCERT · Feb 17, 2022
- SEVD-2020-287-02 Wibu-Systems CodeMeter Vulnerabilities Schneider Electric CPCERT · Dec 8, 2020
- VDE-2020-034 Pepperl+Fuchs: VMT MSS and VMT IS - Several vulnerabilities in products utilizing WIBU-SYSTEMS CodeMeter components CERT@VDE · Sep 10, 2020
- VDE-2020-030 PHOENIX CONTACT: Products utilizing WIBU-SYSTEMS CodeMeter components CERT@VDE · Sep 9, 2020