Description
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wibu | CodeMeter Runtime | 0.0 – ≤ 7.60b | 7.21g |
Advisories 19
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- VDE-2025-105 Endress+Hauser: Multiple products affected by Wibu-Systems CodeMeter Vulnerability CERT@VDE · Dec 8, 2025
- VDE-2023-033 Pilz: WIBU Vulnerabilitiy in multiple Products CERT@VDE · May 22, 2025
- VDE-2023-032 Weidmueller: WIBU Vulnerability in multiple Products CERT@VDE · May 22, 2025
- FSA-202305 Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in several products CERT@VDE · May 13, 2025
- WID-SEC-2024-0943 CODESYS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 7, 2025
- VDE-2023-042 Wago: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro (UPDATE B) CERT@VDE · Nov 20, 2024
- SSA-625850 SSA-625850: Multiple WIBU Systems CodeMeter Vulnerabilities Affecting the Desigo CC Product Family and SENTRON powermanager Siemens ProductCERT · Aug 13, 2024
- ICSA-23-320-03 Siemens Desigo CC product family CISA ICS & IT advisories · Aug 13, 2024
- SSA-240541 SSA-240541: WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products Siemens ProductCERT · May 14, 2024
- ICSA-23-257-06 Siemans WIBU Systems CodeMeter CISA ICS & IT advisories · May 14, 2024
- WID-SEC-2023-2311 Wibu-Systems CodeMeter: Schwachstelle ermöglicht Codeausführung und Privilegienerweiterung BSI CERT-Bund (WID) · Jan 22, 2024
- ICSA-24-004-01 Rockwell Automation FactoryTalk Activation CISA ICS & IT advisories · Jan 4, 2024
- ICSA-25-182-02 FESTO Automation Suite, FluidDraw, and Festo Didactic Products CISA ICS & IT advisories · Dec 5, 2023
- VDE-2023-035 CODESYS: Multiple products affected by WIBU Codemeter vulnerability CERT@VDE · Dec 5, 2023
- VDE-2023-030 Phoenix Contact: Multiple products affected by WIBU Codemeter Vulnerability (Update A) CERT@VDE · Nov 13, 2023
- VDE-2023-031 Trumpf: Multiple Products affected by WIBU Codemeter Vulnerability CERT@VDE · Nov 13, 2023
- SCA-2023-0009 Vulnerability in Wibu-Systems CodeMeter Runtime affects multiple SICK products SICK PSIRT · Sep 29, 2023