GCVE - cpe:2.3:a:wibu:codemeter:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wibu:codemeter:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Wibu (`ee7f1e08-eff9-5370-8cbb-81bcaf8192c1`)
Product	Codemeter (`d3be8a74-10c6-58b7-8d7b-e5b6701792ca`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-47809`	vulnerable	2026-06-08 07:27:14.888551	Details available HIGH (8.2) Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer. Published: 2025-05-16T00:00:00.000Z Updated: 2025-05-16T13:36:00.498Z Open on db.gcve.eu Reference links https://www.wibu.com/support/security-advisories/wibu-100120.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20094`	vulnerable	2026-06-08 05:29:08.453338	Details available A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to crash the CodeMeter Runtime Server. Published: 2021-06-16T11:09:07.000Z Updated: 2024-08-03T17:30:07.586Z Open on db.gcve.eu Reference links https://www.tenable.com/security/research/tra-2021-24 https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-210423-02.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-675303.pdf https://us-cert.cisa.gov/ics/advisories/icsa-21-210-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-20093`	vulnerable	2026-06-08 05:29:08.439997	Details available A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server. Published: 2021-06-16T11:09:02.000Z Updated: 2024-08-03T17:30:07.515Z Open on db.gcve.eu Reference links https://www.tenable.com/security/research/tra-2021-24 https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-210423-01.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-675303.pdf https://us-cert.cisa.gov/ics/advisories/icsa-21-210-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-37017`	vulnerable	2026-06-08 05:25:50.011041	CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path HIGH (7.8) CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CodeMeter Runtime Server service to inject malicious code that would execute with LocalSystem permissions. Published: 2026-01-29T14:28:33.069Z Updated: 2026-03-05T01:27:27.506Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/48735 https://www.wibu.com/us/products/codemeter/runtime.html https://www.vulncheck.com/advisories/codemeter-codemeterexe-unquoted-service-path	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16233`	vulnerable	2026-06-08 05:19:27.804516	Details available An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data from the heap. Published: 2020-09-16T19:51:20.000Z Updated: 2024-08-04T13:37:53.590Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14519`	vulnerable	2026-06-08 05:19:23.676830	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14517`	vulnerable	2026-06-08 05:19:23.673215	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14515`	vulnerable	2026-06-08 05:19:23.669327	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14513`	vulnerable	2026-06-08 05:19:23.666224	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14509`	vulnerable	2026-06-08 05:19:23.654895	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-13754`	vulnerable	2026-06-08 05:08:48.820704	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.