CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 02:05.
Filters
1 active1 advisories found
VDE-2024-001
TRUMPF: Multiple products contain WIBU CodeMeter vulnerabilities
Published
29 January 2024
Last update
29 January 2024
Linked CVEs
Affected sectors
Risk evaluation
The TRUMPF CAD/CAM software tools mentioned above use the vulnerable CodeMeter Runtime (up to version 7.60d) application from WIBU-SYSTEMS AG to manage licenses within the component TRUMPF License Expert. This CodeMeter application contains new vulnerabilities, which may enable an attacker to gain full access to the server or workstation on which the TRUMPF License Expert has been installed on. A new version of the TRUMPF License Expert which fixes these vulnerabilities is available.
Mitigation summary
CVE-2023-38545 only appears when used together with a SOCKS-5 Proxy. Not using theaffected products via a SOCKS-5 proxy mitigates the vulnerability.
Revision history (1)
Initial publication — 29 January 2024
Initial revision.