License to Kill: Leveraging License Management to Attack ICS Networks

Claroty researchers disclosed six critical vulnerabilities in Wibu-Systems' CodeMeter license management component used in OT environments; the flaws could enable attackers to alter or inject software licenses, crash devices and processes, exploit encryption weaknesses for remote code execution, and move laterally across industrial networks, exposing many industries that rely on this third-party component.