CVE-2023-3935

Published: Sep 13, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD (Secondary)

Description

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.

Affected (25)

Products: Wibu: Codemeter Runtime · Trumpf: Oseon, Programmingtube, Teczonebend, Tops Unfold, Topscalculation, Trumpflicenseexpert, Trutops, Trutops Cell Classic, Trutops Cell Sw48, Trutops Mark 3d, Trutopsboost, Trutopsfab, Trutopsfab Storage Smallstore, Trutopsprint, Trutopsprintmultilaserassistant, Trutopsweld, Tubedesign · Phoenixcontact: Activation Wizard, E Mobility Charging Suite, Fl Network Manager, Iol Conf, Module Type Package Designer, Plcnext Engineer

1 product

17 products

Trutopsfab Storage Smallstore

Trutopsprint

Trutopsprintmultilaserassistant

6 products

E Mobility Charging Suite

Fl Network Manager

Iol Conf

Module Type Package Designer

Plcnext Engineer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wibu Codemeter Runtime	version < 7.60c

Configuration B

17 vulnerable

Vulnerable Software	Affected Versions
Trumpf Oseon	1.0.0 ≤ version ≤ 3.0.22
Trumpf Programmingtube	1.0.1 ≤ version ≤ 4.6.3
Trumpf Teczonebend	18.02.r8 ≤ version ≤ 23.06.01
Trumpf Tops Unfold	Version 05.03.00.00
Trumpf Topscalculation	14.00 ≤ version ≤ 22.00.00
Trumpf Trumpflicenseexpert	1.5.2 ≤ version ≤ 1.11.1
Trumpf Trutops	08.00 ≤ version ≤ 12.01.00.00
Trumpf Trutops Cell Classic	version ≤ 09.09.02
Trumpf Trutops Cell Sw48	01.00 ≤ version ≤ 02.26.0
Trumpf Trutops Mark 3d	01.00 ≤ version ≤ 06.01
Trumpf Trutopsboost	06.00.23.00 ≤ version ≤ 16.0.22
Trumpf Trutopsfab	15.00.23.00 ≤ version ≤ 22.8.25
Trumpf Trutopsfab Storage Smallstore	14.06.20 ≤ version ≤ 20.04.20.00
Trumpf Trutopsprint	00.06.00 ≤ version ≤ 01.00
Trumpf Trutopsprintmultilaserassistant	version ≥ 01.02
Trumpf Trutopsweld	7.0.198.241 ≤ version ≤ 9.0.28148.1
Trumpf Tubedesign	08.00 ≤ version ≤ 14.06.150

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Phoenixcontact Activation Wizard	version ≤ 1.6
Phoenixcontact E Mobility Charging Suite	version ≤ 1.7.0
Phoenixcontact Fl Network Manager	version ≤ 7.0
Phoenixcontact Iol Conf	version ≤ 1.7.0
Phoenixcontact Module Type Package Designer	version < 1.2.0
Phoenixcontact Module Type Package Designer	Version 1.2.0 beta
Phoenixcontact Plcnext Engineer	version ≤ 2023.6