FESTO Automation Suite, FluidDraw, and Festo Didactic Products
A vulnerability in the Wibu CodeMeter Runtime, which is part of the installation packages of several Festo products, was found. An attacker exploiting the vulnerability in WIBU CodeMeter Runtime in server mode could gain full access to the affected server via network access without any user interaction. This could lead to remote code execution and escalation of privileges giving full admin access on the host system for an already authenticated user (logged in locally to the PC).
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-3935US | — | — | ||
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CERT@VDE Security Advisoriesexternal
- For further security-related issues in Festo products please contact the Festo Product Security Incident Response Team (PSIRT)external
- ICS Advisory ICSA-25-182-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-182-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (5)
- BehobenCIROS Studio / Education
Update CodeMeter Runtime to version >= 7.60c The latest version of CodeMeter Runtime can be downloaded from WIBU System's web site.
https://www.wibu.com/support/user/user-software.html - BehobenFesto Automation Suite
Planned Fix in Summer Release 2024
- BehobenFluidDraw
Update to the latest version.
- BehobenFluidSIM
Update CodeMeter Runtime to version >= 7.60c The latest version of CodeMeter Runtime can be downloaded from WIBU System's web site.
https://www.wibu.com/support/user/user-software.html - BehobenMES-PC
Update CodeMeter Runtime to version >= 7.60c The latest version of CodeMeter Runtime can be downloaded from WIBU System's web site.
https://www.wibu.com/support/user/user-software.html
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan