CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-3935
Critical (9.8). EPSS 2.0% chance of exploitation in the next 30 days.
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.
Severity
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phoenixcontact:activation_wizard
- phoenixcontact:e-mobility_charging_suite
- phoenixcontact:fl_network_manager
- phoenixcontact:iol-conf
- phoenixcontact:module_type_package_designer
- phoenixcontact:plcnext_engineer
- trumpf:oseon
- trumpf:programmingtube
- trumpf:teczonebend
- trumpf:tops_unfold
- trumpf:topscalculation
- trumpf:trumpflicenseexpert
- trumpf:trutops
- trumpf:trutops_cell_classic
- trumpf:trutops_cell_sw48
- trumpf:trutops_mark_3d
- trumpf:trutopsboost
- trumpf:trutopsfab
- trumpf:trutopsfab_storage_smallstore
- trumpf:trutopsprint
- trumpf:trutopsprintmultilaserassistant
- trumpf:trutopsweld
- trumpf:tubedesign
- wibu:codemeter_runtime
References
- https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf
- https://cert.vde.com/en/advisories/VDE-2023-030/
- https://cert.vde.com/en/advisories/VDE-2023-031/
- https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf
- https://cert.vde.com/en/advisories/VDE-2023-030/