CVE-2020-14509

9.8 criticalEPSS 2.1%

Critical (9.8) in wibu codemeter. EPSS 2.1% chance of exploitation in the next 30 days.

Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-805
Published: 2020-09-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wibu:codemeter

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01
https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01

Check your stack JSON