CVE-2023-3935: A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access…

Description

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)2.0% · higher than 80% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AW

Activation Wizard · Phoenixcontact

through 1.6 · source: NVD

CR

Codemeter Runtime · Wibu

before 7.60c · source: NVD

EC

E-mobility Charging Suite · Phoenixcontact

through 1.7.0 · source: NVD

FN

FL Network Manager · Phoenixcontact

through 7.0 · source: NVD

IO

Iol-conf · Phoenixcontact

through 1.7.0 · source: NVD

MT

Module Type Package Designer · Phoenixcontact

before 1.2.0; 1.2.0 · source: NVD

OS

Oseon · Trumpf

1.0.0 through 3.0.22 · source: NVD

PE

Plcnext Engineer · Phoenixcontact

through 2023.6 · source: NVD

PR

Programmingtube · Trumpf

1.0.1 through 4.6.3 · source: NVD

TE

Teczonebend · Trumpf

18.02.r8 through 23.06.01 · source: NVD

TU

Tops Unfold · Trumpf

05.03.00.00 · source: NVD

TO

Topscalculation · Trumpf

14.00 through 22.00.00 · source: NVD