CVE-2020-14517

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server) and the server accepts external connections, which may allow an attacker to remotely communicate with the CodeMeter API.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-326 CWE-327

Affected software

No affected versions have been published.

Timeline

Published: Sep 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-145185.3Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker.CVE-2020-145197.5This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including V CVE-2020-14528.6<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application CVE-2020-145207.5The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (al CVE-2020-145219.8Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious att CVE-2020-145227.5Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled r CVE-2020-145239.8Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.CVE-2020-145249.8Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based b CVE-2020-145253.5Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input CVE-2020-145275.9Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versio CVE-2020-145286.1Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versio CVE-2020-145295.4Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module). Supported v