| Publishing Date | 2025-07-21 |
|---|---|
| Last Update | 2026-01-12 |
| Tracking ID | IBA-2025-02 |
| CVSS Base Score | 7.7 |
| CVSS Vector | CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H |
Summary
The CodeMeter Installer, which is installed with ibaSetup on Windows, has a bug that, under certain circumstances, allows an escalation of privileges for an unprivileged account. After installation using the built-in administrator account on an unprivileged account with UAC, CodeMeter launches the CodeMeter Control Center with system privileges.
See more information here https://www.wibu.com/de/support/security-advisories/wibu-100120.html.
Affected products
This applies to all iba products up to the versions listed below, which are delivered with CodeMeter Runtime version 8.40 or higher.
- ibaDaVIS v3.3.0
- ibaHD-Server v3.4.6
- ibaDatCoordinator v4.0.3
- ibaManagementStudio v2.2.1
- ibaAnalyzer v8.3.3
- ibaCapture v5.2.2
- ibaPDA v8.12.0
- ibaCMC v3.6.0
- ibaVision v3.1.2
- ibaLogic v5.7.2
How do I know that I'm affected
If you install iba software on a non-admin user account and then use the administrator default user account to install the software on your System with UAC, you will be affected.
Solution
Restart the system after installation, or log off and back in again as the user with whom you installed the application. Alternatively, do not use the administrator account in Windows to install the application; use another user that was manually created and is in the Administrator group.
Info:
Updating to version 8.40 of CodeMeter or higher will resolve the problem. This version can be downloaded from https://www.wibu.com/support/user/user-software.html.
Customer Actions
Option 1.
Restart the system after installation, or log off and back in again as the user with whom you installed the application. Alternatively, do not use the administrator account in Windows to install the application; use another user that was manually created and is in the Administrator group.
Option 2.
Install CodeMeter 8.40 or higher manually before installing iba software.
Timeline
| 2025-07-21 | Noted by the Security Team. |
| 2025-07-22 | Information on what to look out for. |
| 2025-09-02 | CodeMeter has released a version that works with the iba setup assistant. |
| 2025-09-11 | Release ibaHD-Server v3.4.6 |
| 2025-09-25 | Release ibaManagementStudio v2.2.1 |
| 2025-09-01 | Release ibaAnalyzer v8.3.3 |
| 2025-09-10 | Release ibaCapture v5.2.2 |
| 2025-10-09 | Release ibaDaVIS v3.3.0 |
| 2025-10-09 | Release ibaDatCoordinator v4.0.3 |
| 2025-10-22 | Release ibaPDA v8.12.0 |
| 2025-11-12 | Release ibaCMC v3.6.0 |
| 2025-11-20 | Release ibaVision v3.1.2 |
| 2025-12-17 | Release ibaLogic v5.7.2 |
