CVE-2023-3935

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.

• wibu codemeter runtime (< 7.60c) • trumpf oseon (>= 1.0.0 <= 3.0.22) • trumpf programmingtube (>= 1.0.1 <= 4.6.3) • trumpf teczonebend (>= 18.02.r8 <= 23.06.01) • trumpf tops unfold 05.03.00.00 • trumpf topscalculation (>= 14.00 <= 22.00.00) • trumpf trumpflicenseexpert (>= 1.5.2 <= 1.11.1) • trumpf trutops (>= 08.00 <= 12.01.00.00) • trumpf trutops cell classic (<= 09.09.02) • trumpf trutops cell sw48 (>= 01.00 <= 02.26.0) • trumpf trutops mark 3d (>= 01.00 <= 06.01) • trumpf trutopsboost (>= 06.00.23.00 <= 16.0.22) • trumpf trutopsfab (>= 15.00.23.00 <= 22.8.25) • trumpf trutopsfab storage smallstore (>= 14.06.20 <= 20.04.20.00) • trumpf trutopsprint (>= 00.06.00 <= 01.00) • trumpf trutopsprintmultilaserassistant (>= 01.02) • trumpf trutopsweld (>= 7.0.198.241 <= 9.0.28148.1) • trumpf tubedesign (>= 08.00 <= 14.06.150) • phoenixcontact activation wizard (<= 1.6) • phoenixcontact e-mobility charging suite (<= 1.7.0) • phoenixcontact fl network manager (<= 7.0) • phoenixcontact iol-conf (<= 1.7.0) • phoenixcontact module type package designer (< 1.2.0) • phoenixcontact module type package designer 1.2.0 • phoenixcontact plcnext engineer (<= 2023.6)