Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:35.

Filters

1 active
Reset filters

1 advisories found

VDE-2020-039

TRUMPF: Multiple products prone to WIBU CodeMeter vulnerabilities

TRUMPF — CAD/CAM software tools

TRUMPF PSIRTcritical

Published

27 October 2020

Last update

14 May 2025

Affected sectors

Risk evaluation

A number of TRUMPF CAD/CAM software tools use the CodeMeter Runtime application from WIBU-SYSTEMS AG to manage licences. This application contains a number of vulnerabilities, which enable an attacker to prevent normal operation of CodeMeter, resulting in a Denial-of-Service and potentially execute arbitrary code.

Mitigation summary

- Use the updated versions of the TRUMPF CAD/CAM products that will be available via your service channel shortly. - Until then, reduce internet usage on workstations with TRUMPF CAD/CAM products to a minimum.

Revision history (2)
  1. Initial publication — 27 October 2020

    Initial revision.

  2. Update A — 14 May 2025

    Fix: reference category, added distribution

Official source: TRUMPF PSIRT