Vulnerability-Lookup

GHSA-4VCW-H879-447Q

Vulnerability from github – Published: 2026-08-27 12:30 – Updated: 2026-08-27 12:30

Details

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially sensitive configuration data and overwrite selected values in Server.ini. This does include the hash of the credentials for the CodeMeter WebAdmin, enabling WebAdmin takeover.

Severity

8.6 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-81573"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-284"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-27T10:16:39Z",
    "severity": "HIGH"
  },
  "details": "If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network-\norigin restrictions. Commands intended only for local or same-network clients can therefore be executed by\narbitrary remote peers. An attacker can read potentially sensitive configuration data and overwrite selected values\nin Server.ini. This does include the hash of the credentials for the CodeMeter WebAdmin, enabling WebAdmin\ntakeover.",
  "id": "GHSA-4vcw-h879-447q",
  "modified": "2026-08-27T12:30:26Z",
  "published": "2026-08-27T12:30:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81573"
    },
    {
      "type": "WEB",
      "url": "https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-103401.pdf"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2026-81573 (GCVE-0-2026-81573)

Vulnerability from cvelistv5 – Published: 2026-08-27 07:09 – Updated: 2026-08-27 13:33

Title

Improper Access Control in Local-Only Configuration Commands

Summary

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-27 13:33 UTC

CWE

CWE-284 - Improper Access Control

Assigner

wibu

References

1 reference

URL	Tags
https://cdn.wibu.com/fileadmin/wibu_downloads/sec…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
wibu-systems-ag	codemeter-runtime	Affected: 9.00 , < 9.10 (custom) Affected: 8.00 , < 8.41a (custom) Affected: 7.x Affected: 6.x cpe:2.3:a:wibu-systems-ag:codemeter-runtime:::::::: cpe:2.3:a:wibu-systems-ag:codemeter-runtime:::::::: cpe:2.3:a:wibu-systems-ag:codemeter-runtime:7.x:::::::* cpe:2.3:a:wibu-systems-ag:codemeter-runtime:6.x:::::::*

Date Public

2026-08-25 13:00

Credits

Andrew Teylu of Vector Informatik GmbH

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-81573",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-27T13:33:30.362029Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-27T13:33:47.763Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.wibu.com/products/codemeter/runtime.html",
          "defaultStatus": "unaffected",
          "product": "codemeter-runtime",
          "vendor": "wibu-systems-ag",
          "versions": [
            {
              "lessThan": "9.10",
              "status": "affected",
              "version": "9.00",
              "versionType": "custom"
            },
            {
              "lessThan": "8.41a",
              "status": "affected",
              "version": "8.00",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "7.x"
            },
            {
              "status": "affected",
              "version": "6.x"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:wibu-systems-ag:codemeter-runtime:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.10",
                  "versionStartIncluding": "9.00",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:wibu-systems-ag:codemeter-runtime:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "8.41a",
                  "versionStartIncluding": "8.00",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:wibu-systems-ag:codemeter-runtime:7.x:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:wibu-systems-ag:codemeter-runtime:6.x:*:*:*:*:*:*:*",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Andrew Teylu of Vector Informatik GmbH"
        }
      ],
      "datePublic": "2026-08-25T13:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network-\u003cbr\u003eorigin restrictions. Commands intended only for local or same-network clients can therefore be executed by\u003cbr\u003earbitrary remote peers. An attacker can read potentially sensitive configuration data and overwrite selected values\u003cbr\u003ein Server.ini. This does include the hash of the credentials for the CodeMeter WebAdmin, enabling WebAdmin\u003cbr\u003etakeover."
            }
          ],
          "value": "If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network-\norigin restrictions. Commands intended only for local or same-network clients can therefore be executed by\narbitrary remote peers. An attacker can read potentially sensitive configuration data and overwrite selected values\nin Server.ini. This does include the hash of the credentials for the CodeMeter WebAdmin, enabling WebAdmin\ntakeover."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284 Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T07:56:22.618Z",
        "orgId": "2fc02b1f-71e7-4514-a878-169626f68903",
        "shortName": "wibu"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-103401.pdf"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Improper Access Control in Local-Only Configuration Commands",
      "x_generator": {
        "engine": "Vulnogram 1.0.0-beta"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2fc02b1f-71e7-4514-a878-169626f68903",
    "assignerShortName": "wibu",
    "cveId": "CVE-2026-81573",
    "datePublished": "2026-08-27T07:09:09.122Z",
    "dateReserved": "2026-08-27T07:01:24.780Z",
    "dateUpdated": "2026-08-27T13:33:47.763Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

GHSA-4VCW-H879-447Q

CVE-2026-81573 (GCVE-0-2026-81573)

Tags

Sightings

Nomenclature