Wibu-Systems CodeMeter (Update F)
Successful exploitation of these vulnerabilities could allow an attacker to alter and forge a license file, cause a denial-of-service condition, potentially attain remote code execution, read heap data, and prevent normal operation of third-party software dependent on the CodeMeter.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-16233US | high7.5 | — | ||
An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data from the heap. | ||||
| CVE-2020-14519US | high7.5 | — | ||
This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected We… | ||||
| CVE-2020-14517US | critical9.8OT erhöht | — | ||
Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server) and… | ||||
| CVE-2020-14515US | high7.5 | — | ||
CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking mechanism, which allows… | ||||
| CVE-2020-14513US | high7.5 | — | ||
CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unverified length fields. | ||||
| CVE-2020-14509US | critical9.8 | — | ||
Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send s… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- BehobenCodeMeter
For more information on products dependent on the affected CodeMeter see the following vendor security advisories:
https://cert.vde.com/en-us/advisories/vde-2020-041 - BehobenCodeMeter
For more information on products dependent on the affected CodeMeter see the following vendor security advisories:
https://cert.vde.com/en-us/advisories/vde-2020-041 - BehobenCodeMeter
For more information on products dependent on the affected CodeMeter see the following vendor security advisories:
https://cert.vde.com/en-us/advisories/vde-2020-041 - BehobenCodeMeter
For more information on products dependent on the affected CodeMeter see the following vendor security advisories:
https://cert.vde.com/en-us/advisories/vde-2020-041 - BehobenCodeMeter
For more information on products dependent on the affected CodeMeter see the following vendor security advisories:
https://cert.vde.com/en-us/advisories/vde-2020-041 - BehobenCodeMeter
For more information on products dependent on the affected CodeMeter see the following vendor security advisories:
https://cert.vde.com/en-us/advisories/vde-2020-041
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan