Weidmueller: WIBU Vulnerability in multiple Products
Multiple Weidmueller products are affected by recent WIBU vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-3935US | — | — | ||
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- Mitigation
u-create studio: Disabling the network server function within CodeMeter would mitigate the vulnerability. To disable this function please refer to the following steps: 1. Navigate to the CodeMeter WebAdmin Website 2. Select option Settings > Server > Server access 3. Choose option 'deactivate' in section 'network server' 4. Click 'Apply' button on the bottom of the website
- Behoben
For the affected **u-control web Controllers** and **IoT-Gateways**, please update the firmware to at least version **2.0.2**. The firmware update can be obtained from [www.weidmueller.com](https://www.weidmueller.com). For **u-create studio**, please update the **CodeMeter control center** software to at least version **7.60c**. The Codemeter control center is included in u-create studio and is installed on your computer in parallel. The Codemeter control center update can be obtained from the **WIBU-SYSTEMS** homepage. Look for **'CodeMeter User Runtime für Windows'** on the WIBU website. Find below appropriate patched firmware versions for all affected products: | Product Number | Product Name | Patched in Version | |----------------|---------------------------------------------------|---------------------| | 1334950000 | UC20-WL2000-AC (with u-OS) | 2.0.2 | | 1334990000 | UC20-WL2000-IOT (with u-OS) | 2.0.2 | | 2682620000 | IOT-GW30 (with u-OS) | 2.0.2 | | 2682630000 | IOT-GW30-4G-EU (with u-OS) | 2.0.2 | | 2660130000 | u-create studio with CodeMeter control center | 7.60c |
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan