Security Vulnerabilities in all versions of the CodeMeter User Runtime software

Summary

We were informed by our supplier Wibu-Systems about two severe and critical Security Issues within their product the "CodeMeter User Runtime" software.

A new version 7.21a of the CodeMeter User Runtime software is available from Wibu Systems from 15.06.2021, that fixes these vulnerabilities.

The vulnerabilities have been published with the following IDs:

CVE-2021-20093
CVE-2021-20094

For more information, please see the COPA-DATA security vulnerability announcement CD_SVA_2021_1 down below.

Description

We were informed by our supplier Wibu-Systems about two severe and critical Security Issues within their product the "CodeMeter User Runtime" software.

A new version 7.21a of the CodeMeter User Runtime software is available from Wibu Systems from 15.06.2021, that fixes these vulnerabilities.

The vulnerabilities have been published with the following IDs:

CVE-2021-20093
CVE-2021-20094

For more information, please see the COPA-DATA security vulnerability announcement CD_SVA_2021_1 down below.

Solution

Please note that the build update does not update the CodeMeter User Runtime software.

A manual update of the CodeMeter User Runtime software is required.

For more information, please see the COPA-DATA security vulnerability announcement CD_SVA_2021_1 down below.

Related Articles
CD_SVA_2023_3: Wibu Systems - CodeMeter Runtime - security vulnerability addressed
A report has been received for the following security vulnerability in the zenon software platform: CVE-2023-3935 Further details regarding the vulnerability, mitigation options and product fixes that may be available, can be found in the document ...
Security Vulnerabilities in the CodeMeter User Runtime software versions 7.00 and lower
Summary We were informed by our supplier Wibu-Systems about six severe and critical Security Issues within their product the "CodeMeter User Runtime" software. A new version 7.10a of the CodeMeter User Runtime software is available from Wibu Systems ...
Security Vulnerability in the CodeMeter User Runtime software
Summary We were informed by our supplier Wibu-Systems about a severe Security Issue within their product the "CodeMeter User Runtime" software. A new version 7.30a of the CodeMeter User Runtime software is available from Wibu Systems from 05.10.2021, ...
CD_SVA_2023_2: security vulnerabilities in the zenon platform
A report has been received for the following security vulnerabilities in the zenon software platform: CVE-2023-3321 CVE-2023-3323 CVE-2023-3324 Further details regarding the vulnerabilities, mitigation options and product fixes that may be available, ...
FAQ: Is zenon in combination with the CodeMeter Runtime affected by the Vulnerabilites mentioned in the "Security Advisory WIBU-201218-07" from Wibu Systems?
No, the vulnerabilities affect a CodeMeter component called AxProtector which is not used by zenon or COPA-DATA.

Security Vulnerabilities in all versions of the CodeMeter User Runtime software

Security Vulnerabilities in all versions of the CodeMeter User Runtime software

Summary

Description

Solution

Related Articles

CD_SVA_2023_3: Wibu Systems - CodeMeter Runtime - security vulnerability addressed

Security Vulnerabilities in the CodeMeter User Runtime software versions 7.00 and lower

Security Vulnerability in the CodeMeter User Runtime software

CD_SVA_2023_2: security vulnerabilities in the zenon platform

FAQ: Is zenon in combination with the CodeMeter Runtime affected by the Vulnerabilites mentioned in the "Security Advisory WIBU-201218-07" from Wibu Systems?