Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wibu codemeter runtime vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2011-4057
Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions prior to 4.40 allows remote malicious users to cause a denial of service (CodeMeter.exe crash) via certain crafted packets to TCP port 22350.
Wibu Codemeter Runtime 4.10bWibu Codemeter RuntimeWibu Codemeter Runtime 4.20aWibu Codemeter Runtime 4.30c
641
VMScore
CVE-2014-8419
Wibu-Systems CodeMeter Runtime prior to 5.20 uses weak permissions (read and write access for all users) for codemeter.exe, which allows local users to gain privileges via a Trojan horse file.
Wibu Codemeter Runtime
668
VMScore
CVE-2020-14517
Protocol encryption can be easily broken for CodeMeter (All versions before 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server) and the server accepts external connections, which may allow an malicious user to remotely communicate wi...
Wibu Codemeter
445
VMScore
CVE-2021-20094
A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to crash the CodeMeter Runtime Server.
Wibu CodemeterSiemens Pss Cape -Siemens Sicam 230 Firmware -
NA
CVE-2023-3935
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote malicious user to achieve RCE and gain full access of the host system.
Wibu Codemeter RuntimeTrumpf TubedesignTrumpf TrutopsweldTrumpf TrutopsprintmultilaserassistantTrumpf TrutopsprintTrumpf Trutops Mark 3dTrumpf Trutopsfab Storage SmallstoreTrumpf TrutopsfabTrumpf Trutops Cell Sw48Trumpf Trutops Cell ClassicTrumpf TrutopsboostTrumpf TrutopsTrumpf TrumpflicenseexpertTrumpf TopscalculationTrumpf TeczonebendTrumpf Tops Unfold 05.03.00.00Trumpf ProgrammingtubeTrumpf OseonPhoenixcontact Module Type Package Designer 1.2.0Phoenixcontact Module Type Package DesignerPhoenixcontact Activation WizardPhoenixcontact Plcnext Engineer
320
VMScore
CVE-2021-41057
In WIBU CodeMeter Runtime prior to 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.
Wibu Codemeter RuntimeSiemens Pss Cape 14Siemens Pss ESiemens Pss OdmsSiemens Sicam 230Siemens Simatic Information ServerSiemens Simatic Information Server 2019Siemens Simatic Pcs NeoSiemens Simatic Process HistorianSiemens Simatic Wincc OaSiemens Simit
570
VMScore
CVE-2021-20093
A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.
Wibu CodemeterSiemens Pss Cape -Siemens Sicam 230 FirmwareSiemens Sinema Remote Connect ServerSiemens Sinema Remote Connect Server 3.0Siemens Simatic Information Server 2019Siemens Sinec Infrastructure Network ServicesSiemens Simatic Pcs NeoSiemens Simit Simulation PlatformSiemens Simit Simulation Platform 10.3Siemens Simatic Wincc Oa 3.18Siemens Sinec Infrastructure Network Services 1.0.1Siemens Simatic Wincc Oa 3.17Siemens Simatic Process HistorianSiemens Simatic Process Historian 2020Siemens Simatic Information Server 2020
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook