Description
A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Wibu-Systems CodeMeter | < 7.21a | — |
Advisories 7
- VDE-2021-043 WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro CERT@VDE · May 14, 2025
- ICSA-21-210-02 Wibu-Systems CodeMeter Runtime CISA ICS & IT advisories · May 6, 2025
- ICSA-23-320-03 Siemens Desigo CC product family CISA ICS & IT advisories · Aug 13, 2024
- SSA-625850 SSA-625850: Multiple WIBU Systems CodeMeter Vulnerabilities Affecting the Desigo CC Product Family and SENTRON powermanager Siemens ProductCERT · Aug 13, 2024
- VDE-2022-019 Endress+Hauser: Multiple products utilizing vulnerable WIBU-SYSTEMS CodeMeter components CERT@VDE · Jun 2, 2022
- SCA-2022-0001 Vulnerability in SICK FieldEcho SICK PSIRT · Feb 17, 2022
- SSA-675303 SSA-675303: WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products Siemens ProductCERT · Feb 8, 2022