Lucene search

IcscertCVELIST:CVE-2020-14509

HistorySep 16, 2020 - 7:39 p.m.

CVE-2020-14509

2020-09-1619:39:02

CWE-805

icscert

www.cve.org

codemeter

memory corruption

packet parser

length fields

exploit

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

59.6%

JSON

Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.

CNA Affected

[
  {
    "product": "CodeMeter",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 7.10"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-20-203-01