Description
An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data from the heap.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | CodeMeter | All versions prior to 7.10 | — |
Advisories 14
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- VDE-2020-031 Endress+Hauser: Multiple products prone to WIBU CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-039 TRUMPF: Multiple products prone to WIBU CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-033 Pilz: Multiple products prone to WIBU-SYSTEMS CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2020-032 WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT CERT@VDE · May 14, 2025
- VDE-2020-041 Weidmueller: u-create studio < 1.20.2 affected by WIBU-SYSTEMS CodeMeter vulnerabilities CERT@VDE · May 14, 2025
- VDE-2021-055 Pilz: PMC programming tool 2.x.x affected by multiple vulnerabilities CERT@VDE · Apr 26, 2022
- VDE-2021-061 Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities CERT@VDE · Apr 26, 2022
- ICSA-20-203-01 Wibu-Systems CodeMeter (Update F) CISA ICS & IT advisories · Mar 10, 2022
- SSA-455843 SSA-455843: WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products Siemens ProductCERT · Feb 17, 2022
- SEVD-2020-287-02 Wibu-Systems CodeMeter Vulnerabilities Schneider Electric CPCERT · Dec 8, 2020
- VDE-2020-034 Pepperl+Fuchs: VMT MSS and VMT IS - Several vulnerabilities in products utilizing WIBU-SYSTEMS CodeMeter components CERT@VDE · Sep 10, 2020
- VDE-2020-030 PHOENIX CONTACT: Products utilizing WIBU-SYSTEMS CodeMeter components CERT@VDE · Sep 9, 2020