CVE-2020-14509

State: Published
Severity: Not scored
Published: Sep 16, 2020
Updated: Aug 4, 2024
Reserved: Jun 19, 2020

Description

Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.

Scores

The record has no CVSS score.

Weaknesses

CWE-805 BUFFER ACCESS WITH INCORRECT LENGTH VALUE CWE-805

Affected Products

Product	Versions
CodeMetern/a	All versions prior to 7.10Affected

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.