Security Vulnerabilities in CodeMeter Runtime

Description

dSPACE were informed by WIBU Systems, the supplier of the CodeMeter license technology used by dSPACE, about problems in the CodeMeter Runtime that were classified as a potential security risk.

These vulnerabilities potentially affect

  • all dSPACE systems that have a CodeMeter installation and Internet access
  • all systems with CodeMeter installation that are used as license servers​​​​​​​

Detailed information is available in the user information provided by WIBU Systems under the following link. This information can also be used to determine the individual risk.

  • Official Information about CodeMeter from WIBU Systems codemeter-cve-2020-user-information-20200916.pdf PDF, 120.0 KB

CodeMeter Update

The vulnerabilities were closed by WIBU Systems with CodeMeter version 7.10a. This new version has been tested and released by dSPACE.

dSPACE recommends the update to CodeMeter 7.10a for all CodeMeter Floating Network License Servers and all PCs with installed CodeMeter Runtime that have Internet access.

For PCs and virtual machines without Internet access, dSPACE rates the update as optional.

CodeMeter 7.10a is no longer compatible with Windows XP SP3. Therefore the update must not be installed on PCs or virtual machines that run legacy dSPACE releases under Windows XP SP3 based on CodeMeter Licenses and "Legacy Licensing using CodeMeter Licenses”.

 

The updated version is available here.

CodeMeter Version Check

You find your current CodeMeter Runtime version under Windows 10 System Settings - Apps & features. 

Related Topics
Tags
Date 2020-09-29
行业热点 新型许可技术
产品 dSPACE Installation Manager
资料信息 问题解答报告
信息类别 安装和许可证, 故障排除
dSPACE 版本发布 2020-A, 2019-B, 2019-A, 2018-B, 2018-A, 2017-B
Keywords CVE-2020-14509, CVE-2020-14513, CVE-2020-14515, CVE-2020-14517, CVE-2020-14519, CVE-2020-16233

订阅新闻通讯

订阅/管理订阅/取消订阅 dSPACE新闻简讯