CO
Product
CodeMeter
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 1Low 0
Watch
Add CodeMeter to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-14517 | 9.8 | Sep 16 | Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server)… Affected: before 6.90 |
| CVE-2020-14509 | 9.8 | Sep 16 | Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields Affected: before 7.10 |
| CVE-2021-20093 | 9.1 | Jun 16 | A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a Affected: through 7.21a |
| CVE-2020-37017 | 7.8 | Jan 29 | CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path Affected: 6.60 |
| CVE-2021-20094 | 7.5 | Jun 16 | A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a Affected: before 7.21a |
| CVE-2020-16233 | 7.5 | Sep 16 | An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data from the heap Affected: before 7.10 |
| CVE-2020-14519 | 7.5 | Sep 16 | This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected… Affected: before 7.00 |
| CVE-2020-14515 | 7.5 | Sep 16 | CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking mechanism, which allows… Affected: before 6.90 |
| CVE-2020-14513 | 7.5 | Sep 16 | CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unverified length fields Affected: before 6.81 |
| CVE-2017-13754 | 5.4 | Sep 7 | Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web… Affected: through 6.50a |
Showing 10