CVE-2020-14509

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-805

Affected software

No affected versions have been published.

Timeline

Published: Sep 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-14515.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques CVE-2020-145109.8GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to e CVE-2020-145119.8Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and E CVE-2020-145127.5GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords.CVE-2020-145137.5CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unver CVE-2020-145144.3All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to 6 feet away. Further CVE-2020-145157.5CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file sig CVE-2020-1451610.0In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 CVE-2020-145179.8Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if Cod CVE-2020-145185.3Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker.CVE-2020-145197.5This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including V CVE-2020-14528.6<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application