For awareness Low Check exposure in your normal cycle
Phoenix Contact software tools affected by CodeMeter Runtime licence flaws
CERT@VDE advisoriesPhoenix Contact, Wibu-Systems, CodeMeter Runtime
What happened. Phoenix Contact lists multiple flaws in CodeMeter Runtime from Wibu-Systems, used for licence validation in its desktop software tools. They occur only with CodeMeter Runtime 8.x versions below 9.10. Impact details are limited.
Who is affected. Users of Phoenix Contact licensed desktop software tools that use CodeMeter Runtime 8.x versions before 9.10 from Wibu-Systems.
What to do. Check whether your Phoenix Contact software tools use CodeMeter Runtime 8.x before 9.10, and follow advisory VDE-2026-098.
When to act. For awareness: no known exploitation and no score stated
Editor's reading
Forasset ownerIT security
- Purdue level
- L2
Why: Licensed desktop software tools run on engineering workstations, which sit at L2.
- Are you exposed?
Check engineering workstations for CodeMeter Runtime and confirm whether the installed version is 8.x and below 9.10.
- If you cannot fix it yet
- Limit network access to the CodeMeter Runtime service on engineering workstations to known hosts only.
- Watch for
- Look for unexpected network connections to the CodeMeter Runtime service on engineering workstations.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: CERT@VDE advisories (opens certvde.com)
More on Phoenix Contact