WIBU-Systems - WibuKey Runtime for Windows version - security vulnerabilities addressed WIBU-100031 and WIBU-100057
This article contains links to external information not maintained by Ing. Punzenberger COPA-DATA Gmbh.
COPA-DATA has been informed by WIBU-Systems of two security vulnerabilities, that have been addressed in the WibuKey Runtime for Windows, with the following references and CVSS 3.1 base score:
- WIBU-100031 - base score 8.8 - vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- WIBU-100057 - base score 8.8 - vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Both vulnerabilities are reported as exploitable only on the local machine and not over the network.
Both vulnerabilities are only exploitable on Windows system.
zenon versions 7.60 and below, which are no longer maintained, may use a version of the WibuKey Runtime, that is affected by these vulnerabilities.
WIBU-Systems provides an updated version 6.71 of the WibuKey Runtime on their website https://www.wibu.com/support/user/user-software.html
WIBU-Systems provides a TLP:CLEAR security advisory on their website https://www.wibu.com/support/security-advisories.html
COPA-DATA recommends updating installations with affected versions, to a current zenon version that is still maintained, and performing the switch from WibuKey licensing to CodeMeter licensing in the course of this update.
For systems where updating the no longer maintained zenon version is not possible, COPA-DATA recommends system integrators and asset owners to perform a risk assessment, in order to identify, if updating the affected WibuKey Runtime software to version 6.71 or higher, is needed or possible or if other mitigating options may be needed for the affected systems.
Related Articles
CD_SVA_2023_3: Wibu Systems - CodeMeter Runtime - security vulnerability addressed
A report has been received for the following security vulnerability in the zenon software platform: CVE-2023-3935 Further details regarding the vulnerability, mitigation options and product fixes that may be available, can be found in the document ...Wibu Systems - WibuKey Runtime for Windows version - security vulnerabilties addressed WIBU-94453
COPA-DATA has been informed by Wibu Systems of two security vulnerabilities, that have been addressed in the WibuKey Runtime for Windows software, with the following references and CVSS 3.1 base score: CVE-2024-45181 - base score 8.8 - vector ...Security Vulnerability in the CodeMeter User Runtime software
Summary We were informed by our supplier Wibu-Systems about a severe Security Issue within their product the "CodeMeter User Runtime" software. A new version 7.30a of the CodeMeter User Runtime software is available from Wibu Systems from 05.10.2021, ...Security Vulnerabilities in all versions of the CodeMeter User Runtime software
Summary We were informed by our supplier Wibu-Systems about two severe and critical Security Issues within their product the "CodeMeter User Runtime" software. A new version 7.21a of the CodeMeter User Runtime software is available from Wibu Systems ...Wibu-Systems - CodeMeter Control Center for Windows version - security vulnerabilities addressed WIBU-100120
COPA-DATA has been informed by Wibu-Systems about a security vulnerability in the Wibu-Systems CodeMeter Control Center for Windows software with the following CVSS 3.1 base score: CVE-2025-47809 – base score 7.7 - vector ...