by Kastro
Paper/Archive/CVE-2023-3935

CVE-2023-3935

Wibu CodeMeter Runtime — Wibu: Buffer Overflow in CodeMeter Runtime

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 80.4.804 × 2016.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.

Affected

ProductAffectedFixed inSource
CodeMeter Runtime0.0 – 7.60b–CNA
CodeMeter Runtimesee advisory7.21gCNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdfrefcert.vde.com/en/advisories/VDE-2023-031refcert.vde.com/en/advisories/VDE-2023-030