GCVE - cpe:2.3:a:wibu:codemeter_runtime:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wibu:codemeter_runtime:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Wibu (`ee7f1e08-eff9-5370-8cbb-81bcaf8192c1`)
Product	Codemeter Runtime (`021a862f-a918-5fa0-8785-6f2488394b14`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-3935`	not_vulnerable	2026-06-08 06:09:40.818946	Wibu: Buffer Overflow in CodeMeter Runtime CRITICAL (9.8) A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system. Published: 2023-09-13T13:19:18.392Z Updated: 2025-08-27T20:32:53.842Z Open on db.gcve.eu Reference links https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf https://cert.vde.com/en/advisories/VDE-2023-031/ https://cert.vde.com/en/advisories/VDE-2023-030/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3935`	vulnerable	2026-06-08 06:09:40.818891	Wibu: Buffer Overflow in CodeMeter Runtime CRITICAL (9.8) A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system. Published: 2023-09-13T13:19:18.392Z Updated: 2025-08-27T20:32:53.842Z Open on db.gcve.eu Reference links https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf https://cert.vde.com/en/advisories/VDE-2023-031/ https://cert.vde.com/en/advisories/VDE-2023-030/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-41057`	vulnerable	2026-06-08 05:35:19.561595	Details available In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions. Published: 2021-11-14T20:21:30.000Z Updated: 2024-08-04T02:59:31.383Z Open on db.gcve.eu Reference links https://www.wibu.com/us/support/security-advisories.html https://cert-portal.siemens.com/productcert/pdf/ssa-580693.pdf https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-210910-01.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8419`	vulnerable	2026-06-08 05:06:08.724549	Details available Wibu-Systems CodeMeter Runtime before 5.20 uses weak permissions (read and write access for all users) for codemeter.exe, which allows local users to gain privileges via a Trojan horse file. Published: 2014-11-26T15:00:00.000Z Updated: 2024-08-06T13:18:48.164Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/129234/CodeMeter-Weak-Service-Permissions.html http://www.securityfocus.com/archive/1/534079/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4057`	vulnerable	2026-06-08 04:59:28.889444	Details available Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to cause a denial of service (CodeMeter.exe crash) via certain crafted packets to TCP port 22350. Published: 2012-01-13T18:00:00.000Z Updated: 2024-09-16T16:43:55.949Z Open on db.gcve.eu Reference links http://osvdb.org/78223 http://www.kb.cert.org/vuls/id/MAPG-8MYNFL http://www.securityfocus.com/bid/51382 http://www.kb.cert.org/vuls/id/659515 http://jvn.jp/en/jp/JVN78901873/index.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.