NewsSiemens ProductCERT

    SSA-580693 V1.0: WIBU Systems CodeMeter Runtime Denial-of-Service Vulnerability in Siemens Products

    WIBU Systems published information about a denial-of-service vulnerability and an associated fix release version of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens products for license management. The vulnerability is described in the section “Vulnerability Classification” below and got assigned the CVE ID CVE-2021-41057. Successful exploitation of this vulnerability could allow an attacker to crash the CodeMeter Runtime Server (i.e., CodeMeter.exe), which could cause a denial-of-service condition for the affected Siemens product. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates are not, or not yet available.

    Linked advisories

    Affected vendors and products

    More on CodeMeter

    Other advisories

    Other news entries

    Source: https://cert-portal.siemens.com/productcert/pdf/ssa-580693.pdf

    ID