Phoenix Contact: WIBU-SYSTEMS CodeMeter Runtime vulnerabilities in multiple products
A heap-based buffer overflow caused by libcurl and wrong whitespace character interpretationin Javascript, both used in CodeMeter Runtime affecting multiple products by PHOENIX CONTACT.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-38545US | critical9.8 | Exploit | ||
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy
handshake.
When curl is asked to pass along the host name to the SOCKS5 proxy to allow
that to resolve the ad… | ||||
| CVE-2023-24540US | critical9.8 | — | ||
Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029"… | ||||
references
External citations — patches, advisories, analysis.
- VDE-2023-062: Phoenix Contact: WIBU-SYSTEMS CodeMeter Runtime vulnerabilities in multiple products - HTMLself
- CERT@VDE Security Advisories for Phoenix Contact GmbH & Co. KGexternal
- Vendor PSIRTexternal
- VDE-2023-062: Phoenix Contact: WIBU-SYSTEMS CodeMeter Runtime vulnerabilities in multiple products - CSAFself
remediations (4)
- Mitigation
Disable using a SOCKS5 proxy: The proxy environment variables HTTP_PROXY, HTTPS_PROXY and ALL_PROXYmust not be set to socks5h:// Ensure that CodeMeter is not defined to use the SOCKS5 proxy. The variableProxyServer must not be start with socks5h://. On Windows, the definition of that variable is in the registry (regedit) underHKLM/SOFTWARE/WIBU-SYSTEMS/CodeMeter/Server/CurrentVersion On Mac, the definition of that variable is in the file/Library/Preferences/com.wibu.CodeMeter.Server.ini On Linux, the definition of that variable is in the file/etc/wibu/CodeMeter/Server.ini On Solaris, the definition of that variable is in the file/etc/opt/CodeMeter/Server.iniUse general security best practices to protect systems from local and network attacks likedescribed in the application node AH EN INDUSTRIAL SECURITY.
- Mitigation
Disable using a SOCKS5 proxy: The proxy environment variables HTTP_PROXY, HTTPS_PROXY and ALL_PROXYmust not be set to socks5h:// Ensure that CodeMeter is not defined to use the SOCKS5 proxy. The variableProxyServer must not be start with socks5h://. On Windows, the definition of that variable is in the registry (regedit) underHKLM/SOFTWARE/WIBU-SYSTEMS/CodeMeter/Server/CurrentVersion On Mac, the definition of that variable is in the file/Library/Preferences/com.wibu.CodeMeter.Server.ini On Linux, the definition of that variable is in the file/etc/wibu/CodeMeter/Server.ini On Solaris, the definition of that variable is in the file/etc/opt/CodeMeter/Server.iniUse general security best practices to protect systems from local and network attacks likedescribed in the application node AH EN INDUSTRIAL SECURITY.
- Fixed
PHOENIX CONTACT strongly recommends affected users to upgrade to CodeMeter V7.60d,which fixes these vulnerabilities. WIBU-SYSTEMS has already published an update forCodeMeter on their homepage. Since this current version of CodeMeter V7.60d has not yetbeen incorporated into Phoenix Contact products, we strongly recommend to download andinstall the current CodeMeter version directly from the WIBU-SYSTEMS homepage.Update Phoenix Contact Activation Wizard to version 1.7 when available. Please check the Phoenix Contact e-Shop for your related Software product regularly.
- Fixed
PHOENIX CONTACT strongly recommends affected users to upgrade to CodeMeter V7.60d,which fixes these vulnerabilities. WIBU-SYSTEMS has already published an update forCodeMeter on their homepage. Since this current version of CodeMeter V7.60d has not yetbeen incorporated into Phoenix Contact products, we strongly recommend to download andinstall the current CodeMeter version directly from the WIBU-SYSTEMS homepage.Update Phoenix Contact Activation Wizard to version 1.7 when available. Please check the Phoenix Contact e-Shop for your related Software product regularly.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan