Action recommended: Update Wibu CodeMeter Runtime

Are you affected?

This recommendation applies to customers using:

• MERLIC
• MVTec License Server
• MVTec campus licenses

HALCON users are affected if they operate an MVTec License Server or use CodeMeter Runtime as part of another licensing configuration.

HALCON users who do not operate a License Server typically do not require any action.

Recommended action

Affected customers should update to CodeMeter Runtime 8.41a or a newer version within the 8.x release line as soon as it becomes available.

The update will be provided by Wibu-Systems and will be available from the following download page:

https://www.wibu.com/support/user/user-software.html

MVTec currently does not recommend upgrading to CodeMeter Runtime 9, as compatibility testing with MVTec products has not yet been completed.

Future MVTec product updates

Affected MVTec products will include the corrected CodeMeter Runtime version with their next regular update.

Customers with an affected installation should not wait for an MVTec product update. We recommend installing the standalone CodeMeter Runtime update from Wibu-Systems as soon as version 8.41a becomes available.

Further information

The vulnerabilities are documented in the following Wibu-Systems security advisories:

• WIBU-103401
• WIBU-103081

The advisories are listed in the Wibu-Systems security advisory overview:

https://www.wibu.com/support/security-advisories.html

Note that access to the detailed advisories may currently be restricted.

For questions concerning the use of CodeMeter Runtime with MVTec products, please contact your usual support channels.