VULNERABILITY INTELLIGENCE

CVE-2020-14517

CVSS score9.8 CRITICAL
EPSS probability0.68%
CISA KEVNot currently listed
Published2020-09-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server) and the server accepts external connections, which may allow an attacker to remotely communicate with the CodeMeter API.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-326
  • nvd@nist.gov: CWE-327

Primary references