PT-2023-4578 · Wibu · Wibu Codemeter Runtime

Published 2023-08-16 · Updated 2025-07-01 · CVE-2023-3935

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wibu CodeMeter Runtime versions up to 7.60b

Description The issue is related to a heap buffer overflow vulnerability in the Wibu CodeMeter Runtime network service. This vulnerability can be exploited by an unauthenticated, remote attacker to achieve remote code execution (RCE) and gain full access to the host system.

Recommendations For versions up to 7.60b, update to a version later than 7.60b to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

BDU:2023-04985

CVE-2023-3935

Affected Products

Wibu Codemeter Runtime

References · 12

• https://osv.dev/vulnerability/CVE-2023-3935 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3935 · Security Note
• https://bdu.fstec.ru/vul/2023-04985 · Security Note
• https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf · Vendor Advisory
• https://digsilent.de/en/newsreader/security-issue-in-powerfactory-licence-component-cve-2023-3935.html · Note
• https://twitter.com/cracbot/status/1702200555907723586 · Twitter Post
• https://twitter.com/0dayPublishing/status/1940100363773768040 · Twitter Post
• https://t.me/cibsecurity/70389 · Telegram Post
• https://twitter.com/CVEnew/status/1701953478892073275 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2023-031 · Note
• https://cert.vde.com/en/advisories/VDE-2023-030 · Note
• https://wibu.com/ru/support/security-advisories.html · Note