critical9.8
CVE-2023-3935
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE an…
Impact
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wibu | Codemeter Runtime | before 7.60c |
| Trumpf | Oseon | from 1.0.0 through 3.0.22 |
| Trumpf | Programmingtube | from 1.0.1 through 4.6.3 |
| Trumpf | Teczonebend | from 18.02.r8 through 23.06.01 |
| Trumpf | Tops Unfold | Version 05.03.00.00 |
| Trumpf | Topscalculation | from 14.00 through 22.00.00 |
| Trumpf | Trumpflicenseexpert | from 1.5.2 through 1.11.1 |
| Trumpf | Trutops | from 08.00 through 12.01.00.00 |
| Trumpf | Trutops Cell Classic | through 09.09.02 |
| Trumpf | Trutops Cell Sw48 | from 01.00 through 02.26.0 |
| Trumpf | Trutops Mark 3d | from 01.00 through 06.01 |
| Trumpf | Trutopsboost | from 06.00.23.00 through 16.0.22 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf
- https://cert.vde.com/en/advisories/VDE-2023-030/
- https://cert.vde.com/en/advisories/VDE-2023-031/
- https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf
- https://cert.vde.com/en/advisories/VDE-2023-030/
- https://cert.vde.com/en/advisories/VDE-2023-031/