VDE-2023-032

u-create studio: Disabling the network server function within CodeMeter would mitigate the vulnerability. To disable this function please refer to the following steps: 1. Navigate to the CodeMeter WebAdmin Website 2. Select option Settings > Server > Server access 3. Choose option 'deactivate' in section 'network server' 4. Click 'Apply' button on the bottom of the website

For the affected **u-control web Controllers** and **IoT-Gateways**, please update the firmware to at least version **2.0.2**. The firmware update can be obtained from [www.weidmueller.com](https://www.weidmueller.com). For **u-create studio**, please update the **CodeMeter control center** software to at least version **7.60c**. The Codemeter control center is included in u-create studio and is installed on your computer in parallel. The Codemeter control center update can be obtained from the **WIBU-SYSTEMS** homepage. Look for **'CodeMeter User Runtime für Windows'** on the WIBU website. Find below appropriate patched firmware versions for all affected products: | Product Number | Product Name | Patched in Version | |----------------|---------------------------------------------------|---------------------| | 1334950000 | UC20-WL2000-AC (with u-OS) | 2.0.2 | | 1334990000 | UC20-WL2000-IOT (with u-OS) | 2.0.2 | | 2682620000 | IOT-GW30 (with u-OS) | 2.0.2 | | 2682630000 | IOT-GW30-4G-EU (with u-OS) | 2.0.2 | | 2660130000 | u-create studio with CodeMeter control center | 7.60c |