{"id":"CVE-2023-3935","aliases":["EUVD-2023-44561","GHSA-c9rf-qf73-r46f"],"status":"published","title":"Wibu: Buffer Overflow in CodeMeter Runtime","description":"A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01971,"percentile":0.80563,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2023-09-13T13:19:18Z","modified":"2026-06-17T06:15:21Z","products":[{"vendor":"phoenixcontact","product":"activation_wizard"},{"vendor":"phoenixcontact","product":"e-mobility_charging_suite"},{"vendor":"phoenixcontact","product":"fl_network_manager"},{"vendor":"phoenixcontact","product":"iol-conf"},{"vendor":"phoenixcontact","product":"module_type_package_designer"},{"vendor":"phoenixcontact","product":"plcnext_engineer"},{"vendor":"trumpf","product":"oseon"},{"vendor":"trumpf","product":"programmingtube"},{"vendor":"trumpf","product":"teczonebend"},{"vendor":"trumpf","product":"tops_unfold"},{"vendor":"trumpf","product":"topscalculation"},{"vendor":"trumpf","product":"trumpflicenseexpert"},{"vendor":"trumpf","product":"trutops"},{"vendor":"trumpf","product":"trutops_cell_classic"},{"vendor":"trumpf","product":"trutops_cell_sw48"},{"vendor":"trumpf","product":"trutops_mark_3d"},{"vendor":"trumpf","product":"trutopsboost"},{"vendor":"trumpf","product":"trutopsfab"},{"vendor":"trumpf","product":"trutopsfab_storage_smallstore"},{"vendor":"trumpf","product":"trutopsprint"},{"vendor":"trumpf","product":"trutopsprintmultilaserassistant"},{"vendor":"trumpf","product":"trutopsweld"},{"vendor":"trumpf","product":"tubedesign"},{"vendor":"wibu","product":"codemeter runtime"},{"vendor":"wibu","product":"codemeter_runtime"}],"references":[{"url":"https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://cert.vde.com/en/advisories/VDE-2023-031/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://cert.vde.com/en/advisories/VDE-2023-030/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3935"},{"url":"https://github.com/advisories/GHSA-c9rf-qf73-r46f"}],"sources":{"cve":[{"id":"CVE-2023-3935","title":"Wibu: Buffer Overflow in CodeMeter Runtime","description":"A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.","status":"published","published":"2023-09-13T13:19:18.392Z","modified":"2025-08-27T20:32:53.842Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:24.707957Z"}],"euvd":[{"id":"EUVD-2023-44561","description":"A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.","status":"published","published":"2023-09-13T13:19:18Z","modified":"2025-08-27T20:32:53Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:31:51.141859Z"}],"ghsa":[{"id":"GHSA-c9rf-qf73-r46f","title":"A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7...","description":"A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.","status":"published","published":"2023-09-13T15:31:14Z","modified":"2023-11-10T05:01:31Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:54:56.630179Z"}],"nvd":[{"id":"CVE-2023-3935","description":"A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.","status":"published","published":"2023-09-13T14:15:09.147Z","modified":"2026-06-17T06:15:21.707Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:08:29.595868Z"}]}}