CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 02:35.
Filter
1 aktiv1 Advisories gefunden
VDE-2020-033
Pilz: Multiple products prone to WIBU-SYSTEMS CodeMeter vulnerabilities
Veröffentlicht
10. September 2020
Letzte Aktualisierung
14. Mai 2025
Betroffene Sektoren
Risk Evaluation
A number of Pilz software tools use the Software CodeMeter Runtime application from WIBU-SYSTEMS AG to manage licences. This application contains a number of vulnerabilities, which enable an attacker to change and falsify a licence file, prevent normal operation of Code- Meter (Denial-of-Service) and potentially execute arbitrary code.
Zusammenfassung der Gegenmaßnahmen
Use the current Version 7.10 of the Software CodeMeter Runtime, available via the manufacturer's website. https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html Only use the Software CodeMeter Runtime as Client. The software tools named under affected products use the Software CodeMeter Runtime as Client in their default setting. Pilz also recommends using a local firewall to limit unwanted access to the network ser- vices of the device with Software CodeMeter Runtime installed.
Revisionshistorie (3)
Erstveröffentlichung — 10. September 2020
Initial revision.
Update A — 6. November 2024
Fix: correct certvde domain, added self-reference
Update B — 14. Mai 2025
Fix: version space, removed ia, firmware category, added distribution