SSA-240541: WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products
WIBU Systems published information about a heap buffer overflow vulnerability and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products for license management. The vulnerability is described in the section 'Vulnerability Classification' below and got assigned the CVE ID CVE-2023-3935. Successful exploitation of this vulnerability could allow - an unauthenticated remote attacker to execute code on vulnerable products, where CodeMeter Runtime (i.e., CodeMeter.exe) is configured as a server, or - an authenticated local attacker to gain root/admin privileges on vulnerable products, where CodeMeter Runtime is configured as a client. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-3935US | — | — | ||
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of… | ||||
references
External citations — patches, advisories, analysis.
- SSA-240541: WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products - CSAF Versionself
- SSA-240541: WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products - HTML Versionself
- SSA-240541: WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products - PDF Versionself
- SSA-240541: WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products - TXT Versionself
remediations (42)
- MitigationPSS(R)CAPE V14
If CodeMeter Runtime is configured as server: Limit remote access to systems where the CodeMeter Runtime network server is running
- MitigationPSS(R)CAPE V15
For affected versions: Install WIBU Systems CodeMeter Runtime V7.60c or later version manually to fix the issue: Download the package from https://www.wibu.com/support/user/user-software.html and follow the installation instructions from WIBU Systems.
- MitigationPSS(R)E V34
For affected versions: Install WIBU Systems CodeMeter Runtime V7.60c or later version manually to fix the issue: Download the package from https://www.wibu.com/support/user/user-software.html and follow the installation instructions from WIBU Systems.
- MitigationPSS(R)E V35
For affected versions: Install WIBU Systems CodeMeter Runtime V7.60c or later version manually to fix the issue: Download the package from https://www.wibu.com/support/user/user-software.html and follow the installation instructions from WIBU Systems.
- MitigationPSS(R)ODMS V13.0
If CodeMeter Runtime is configured as server: Limit remote access to systems where the CodeMeter Runtime network server is running
- MitigationPSS(R)ODMS V13.1
For affected versions: Install WIBU Systems CodeMeter Runtime V7.60c or later version manually to fix the issue: Download the package from https://www.wibu.com/support/user/user-software.html and follow the installation instructions from WIBU Systems.
- MitigationSIMATIC PCS neo V3
If CodeMeter Runtime is configured as server: Limit remote access to systems where the CodeMeter Runtime network server is running
- MitigationSIMATIC PCS neo V4.0
If CodeMeter Runtime is configured as server: Limit remote access to systems where the CodeMeter Runtime network server is running
- MitigationSIMATIC WinCC OA V3.17
If CodeMeter Runtime is configured as server: Limit remote access to systems where the CodeMeter Runtime network server is running
- MitigationSIMATIC WinCC OA V3.18
If CodeMeter Runtime is configured as server: Limit remote access to systems where the CodeMeter Runtime network server is running
- MitigationSIMATIC WinCC OA V3.19
If CodeMeter Runtime is configured as server: Limit remote access to systems where the CodeMeter Runtime network server is running
- MitigationSIMIT Simulation Platform
If CodeMeter Runtime is configured as server: Limit remote access to systems where the CodeMeter Runtime network server is running
- MitigationSINEC INS
If CodeMeter Runtime is configured as server: Limit remote access to systems where the CodeMeter Runtime network server is running
- MitigationSINEMA Remote Connect
If CodeMeter Runtime is configured as server: Limit remote access to systems where the CodeMeter Runtime network server is running
- No fix plannedSIMATIC PCS neo V3
Currently no fix is planned
- No fix plannedSIMATIC PCS neo V4.0
Currently no fix is planned
- No fix plannedSINEMA Remote Connect
Currently no fix is planned
- FixedPSS(R)CAPE V14
CAPE V14 installations installed from material dated 2023-08-23 or later are not affected, as they contain a fixed version of CodeMeter Runtime. For installations of CAPE V14 using material earlier than 2023-08-23: Install WIBU Systems CodeMeter Runtime V7.60c or later version manually to fix the issue: Download the package from https://www.wibu.com/support/user/user-software.html and follow the installation instructions from WIBU Systems.
- FixedPSS(R)CAPE V15
Update to V15.0.22 or later version
- FixedPSS(R)E V34
Update to V34.9.6 or later version
- FixedPSS(R)E V35
Update to V35.6.1 or later version
- FixedPSS(R)ODMS V13.0
Install WIBU Systems CodeMeter Runtime V7.60c or later version manually to fix the issue: Download the package from https://www.wibu.com/support/user/user-software.html and follow the installation instructions from WIBU Systems.
- FixedPSS(R)ODMS V13.1
Update to V13.1.12.1 or later version
- FixedSIMATIC WinCC OA V3.17
Update to V3.17 P030 or later version
https://www.winccoa.com/downloads/category/versions-patches.html - FixedSIMATIC WinCC OA V3.18
Update to V3.18 P021 or later version
https://www.winccoa.com/downloads/category/versions-patches.html - FixedSIMATIC WinCC OA V3.19
Update to V3.19 P006 or later version
https://www.winccoa.com/downloads/category/versions-patches.html - FixedSIMIT Simulation Platform
Update to V11.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954445/ - FixedSINEC INS
Update to V1.0 SP2 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825710/ - WorkaroundPSS(R)CAPE V14
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundPSS(R)CAPE V15
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundPSS(R)E V34
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundPSS(R)E V35
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundPSS(R)ODMS V13.0
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundPSS(R)ODMS V13.1
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundSIMATIC PCS neo V3
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundSIMATIC PCS neo V4.0
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundSIMATIC WinCC OA V3.17
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundSIMATIC WinCC OA V3.18
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundSIMATIC WinCC OA V3.19
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundSIMIT Simulation Platform
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundSINEC INS
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
- WorkaroundSINEMA Remote Connect
If CodeMeter Runtime is configured as client only in the affected product: Ensure that only trusted persons have access to the system and avoid the configuration of additional local accounts
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan