Description
In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.
Advisories 5
- FSA-202206 Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in multiple products CERT@VDE · Oct 1, 2025
- VDE-2022-002 WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro CERT@VDE · May 22, 2025
- SSA-580693 SSA-580693: WIBU Systems CodeMeter Runtime Denial-of-Service Vulnerability in Siemens Products Siemens ProductCERT · Aug 9, 2022
- VDE-2022-019 Endress+Hauser: Multiple products utilizing vulnerable WIBU-SYSTEMS CodeMeter components CERT@VDE · Jun 2, 2022
- ICSA-21-350-03 Wibu-Systems CodeMeter Runtime CISA ICS & IT advisories · Dec 16, 2021