CVE-2020-14509

Katalog CVE

CVSS 9.8 · Critical EPSS 2,1%

Kerentanan Buffer Access with Incorrect Length Value pada wibu codemeter. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.

Rincian

Terbit di NVD

16 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-805: Buffer Access with Incorrect Length Value

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 80,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01 advisory pihak ketiga · pemerintah AS