ICSA-21-350-03

Wibu-Systems CodeMeter Runtime

view advisory published 2021-12-16

Successful exploitation of this vulnerability could allow an attacker to crash the CodeMeter Runtime Server, which could cause a denial-of-service condition.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-41057US	high7.1	0.30% (22nd)	—	2021-11-14
In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-21-350-03 JSONself
ICS Advisory ICSA-21-350-03 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (1)

FixedCodeMeter Runtime
For more information on products dependent on the affected CodeMeter see the following vendor security advisories:
https://www.wibu.com/support/security-advisories.html

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan