CodeMeter
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-16233 | All versions prior to 7.10 | An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data f | HIGH 7.5 | 1.8 % | ||
| CVE-2020-14513 | All versions prior to 6.81 | CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unver | HIGH 7.5 | 1.6 % | ||
| CVE-2020-14515 | All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code. | CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file sig | HIGH 7.5 | 0.8 % | ||
| CVE-2020-14519 | All versions prior to 7.00, including Version 7.0 or newer with the affected WebSockets API still enabled. This is especially relevant for systems or devices where a web browser is used to access a web server. | This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including V | HIGH 7.5 | 0.6 % | ||
| CVE-2020-14517 | All versions prior to 6.90, including Version 6.90 or newer only if CodeMeter Runtime is running as server. | Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if Cod | CRITICAL 9.8 | 0.7 % | ||
| CVE-2020-14509 | All versions prior to 7.10 | Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify | CRITICAL 9.8 | 2.1 % |