The scope of delivery of our image processing software includes software packages (Common Vision Blox software and Common Vision Blox CameraSuite) that have contained the CodeMeter Runtime from WIBU Systems since 2011. The manufacturer WIBU Systems currently points out six security vulnerabilities in various versions of the CodeMeter Runtime that pose an increased security risk for systems connected to the company network or the Internet. Successful exploitation of these security holes can not only disrupt or prevent the operation of Common Vision Blox - the execution of injected third-party code cannot be ruled out either. (Details sind unter: https://www.wibu.com/support/security-advisories.html abrufbar.)
The following versions of Common Vision Blox and Common Vision Blox CameraSuite are affected by the CodeMeter Runtime vulnerability:
Windows 32 and 64Bit all versions from 2011 (11.00.000)
Also affected are users of older versions of Common Vision Blox before 2011 who have installed the "Common Vision Blox Protection Updater" to be able to use CodeMeter dongles with these older versions.
Following the recommendation of WIBU Systems, we advise affected computers connected to their company network and/or the Internet to update their system to the recently released version 7.10a of the CodeMeter Runtime. This can also be installed subsequently on systems on which older versions of Common Vision Blox are installed.
For updating, please contact our service department at:
service@vmt-systems.com or Tel: +49 621 84250 222
For all further questions regarding the security vulnerability in the CodeMeter Runtime and the recommendations made here, please contact our Service & Support.
