Read the docs

Wibu

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

Wibu records in CISA KEV

No Wibu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Codemeter 9 records MEDIUM Wibukey 6 records HIGH Codemeter Runtime 4 records MEDIUM Codemeter Webadmin 1 record LOW

Records

9 records in Codemeter · all components

TI-2021-03396 CVE-2021-20093 · GHSA-m5xx-rgqg-j2m6

Out-of-bounds read in Wibu-Systems CodeMeter

Priority MEDIUM 64

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.33304 Published 2021-06-16 Fixed in 7.21a CWE-125
TI-2020-11368 CVE-2020-14517 · GHSA-hqvx-g6jw-22pw

Broken or risky cryptographic algorithm in CodeMeter

Priority MEDIUM 43

Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server) and the server accepts external connections…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00679 Published 2020-09-16 No fix listed CWE-326
TI-2021-03397 CVE-2021-20094 · GHSA-fm8v-xp26-8h3q

Out-of-bounds read in Wibu-Systems CodeMeter

Priority MEDIUM 40

A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04673 Published 2021-06-16 Fixed in 7.21a CWE-125
TI-2020-11364 CVE-2020-14513 · GHSA-mhc5-f7x7-jfpg

Improper input validation in CodeMeter

Priority LOW 36

CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unverified length fields.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01562 Published 2020-09-16 Fixed in 6.81 CWE-20
TI-2020-11370 CVE-2020-14519 · GHSA-qf8w-r56m-c9xh

Origin validation error in CodeMeter

Priority LOW 34

This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected WebSockets API still enabled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00637 Published 2020-09-16 No fix listed CWE-346
TI-2020-11366 CVE-2020-14515 · GHSA-77f6-gh77-3f4f

Improper signature verification in CodeMeter

Priority LOW 34

CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking mechanism, which allows attackers to build arbitrary license fil…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00838 Published 2020-09-16 No fix listed CWE-347
TI-2017-10028 CVE-2017-13754 · GHSA-c78m-h25c-7vj6

Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module…

Priority LOW 31

Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field i…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03877 Published 2017-09-07 No fix listed CWE-79
Open these records in search →