CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 01:34.
Filters
1 actief1 advisories gevonden
VDE-2024-001
TRUMPF: Multiple products contain WIBU CodeMeter vulnerabilities
Gepubliceerd
29 januari 2024
Laatste update
29 januari 2024
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
The TRUMPF CAD/CAM software tools mentioned above use the vulnerable CodeMeter Runtime (up to version 7.60d) application from WIBU-SYSTEMS AG to manage licenses within the component TRUMPF License Expert. This CodeMeter application contains new vulnerabilities, which may enable an attacker to gain full access to the server or workstation on which the TRUMPF License Expert has been installed on. A new version of the TRUMPF License Expert which fixes these vulnerabilities is available.
Mitigatiesamenvatting
CVE-2023-38545 only appears when used together with a SOCKS-5 Proxy. Not using theaffected products via a SOCKS-5 proxy mitigates the vulnerability.
Revisiegeschiedenis (1)
Initiële publicatie — 29 januari 2024
Initial revision.