Skip to content
OpenAdvisories
Critical ICSA-20-203-01 6 CVEs

Wibu-Systems CodeMeter (Update F)

Published Aug 20, 2020 · Updated Mar 10, 2022 · Revision 8

Vendor: Wibu Product: CodeMeter

Summary

Successful exploitation of these vulnerabilities could allow an attacker to alter and forge a license file, cause a denial-of-service condition, potentially attain remote code execution, read heap data, and prevent normal operation of third-party software dependent on the CodeMeter.

Vulnerabilities 6

  • Unscored —
    CVE-2020-14509

    Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mech…

  • Unscored —
    CVE-2020-14513

    CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted lice…

  • Unscored —
    CVE-2020-14515

    CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in…

  • Unscored —
    CVE-2020-14517

    Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90…

  • Unscored —
    CVE-2020-14519

    This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are …

  • Unscored —
    CVE-2020-16233

    An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back pack…

Revision history

  1. #8

    ICSA-20-203-01 Wibu-Systems CodeMeter (Update G)

  2. #7

    ICSA-20-203-01 Wibu-Systems CodeMeter (Update F)

  3. #6

    ICSA-20-203-01 Wibu-Systems CodeMeter (Update E)

  4. #5

    ICSA-20-203-01 Wibu-Systems CodeMeter (Update D)

  5. #4

    ICSA-20-203-01 Wibu-Systems CodeMeter (Update C)

  6. #3

    ICSA-20-203-01 Wibu-Systems AG CodeMeter (Update B)

  7. #2

    ICSA-20-203-01 Wibu-Systems CodeMeter (Update A)

  8. #1

    ICSA-20-203-01P WIBU SYSTEMS AG CodeMeter (Update A)

References