CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:05.
Filters
1 actief1 advisories gevonden
VDE-2020-033
Pilz: Multiple products prone to WIBU-SYSTEMS CodeMeter vulnerabilities
Gepubliceerd
10 september 2020
Laatste update
14 mei 2025
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
A number of Pilz software tools use the Software CodeMeter Runtime application from WIBU-SYSTEMS AG to manage licences. This application contains a number of vulnerabilities, which enable an attacker to change and falsify a licence file, prevent normal operation of Code- Meter (Denial-of-Service) and potentially execute arbitrary code.
Mitigatiesamenvatting
Use the current Version 7.10 of the Software CodeMeter Runtime, available via the manufacturer's website. https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html Only use the Software CodeMeter Runtime as Client. The software tools named under affected products use the Software CodeMeter Runtime as Client in their default setting. Pilz also recommends using a local firewall to limit unwanted access to the network ser- vices of the device with Software CodeMeter Runtime installed.
Revisiegeschiedenis (3)
Initiële publicatie — 10 september 2020
Initial revision.
Update A — 6 november 2024
Fix: correct certvde domain, added self-reference
Update B — 14 mei 2025
Fix: version space, removed ia, firmware category, added distribution