VULNERABILITY INTELLIGENCE

CVE-2020-14509

CVSS score9.8 CRITICAL
EPSS probability2.07%
CISA KEVNot currently listed
Published2020-09-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-805
  • nvd@nist.gov: NVD-CWE-Other

Primary references