CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 02:05.
Filter
1 aktiv1 Advisories gefunden
Veröffentlicht
28. November 2023
Letzte Aktualisierung
13. Mai 2025
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
A vulnerability in the Wibu CodeMeter Runtime, which is part of the installation packages of several Festo products, was found. An attacker exploiting the vulnerability in WIBU CodeMeter Runtime in server mode could gain full access to the affected server via network access without any user interaction. This could lead to remote code execution and escalation of privileges giving full admin access on the host system for an already authenticated user (logged in locally to the PC).
Zusammenfassung der Gegenmaßnahmen
Update CodeMeter Runtime to version >= 7.60c The latest version of CodeMeter Runtime can be downloaded from WIBU System's web site.
Revisionshistorie (3)
Erstveröffentlichung — 28. November 2023
Initial version
Update A — 5. Dezember 2023
Removed 'MES4 (v3)', 'MES4 (<=v2)' and 'Energy-PC' from affected products as they do not install WIBU CodeMeter Runtime.
Update B — 13. Mai 2025
Adjusted to VDE template and updated information on fixed version of the Festo Automation Suite. Changed document title from 'Vulnerable Wibu CodeMeter Runtime in Several Festo Products' to 'Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in several products'. Updated legal disclaimer to add references to special provisions.