{"id":"CVE-2020-14509","aliases":["EUVD-2020-6645","GHSA-w97r-xg4x-xx2r"],"status":"published","title":"Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where...","description":"Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0207,"percentile":0.81683,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-805"],"published":"2020-09-16T19:39:02Z","modified":"2026-06-17T02:54:53Z","products":[{"vendor":"wibu","product":"codemeter"}],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14509"},{"url":"https://github.com/advisories/GHSA-w97r-xg4x-xx2r"}],"sources":{"cve":[{"id":"CVE-2020-14509","description":"Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.","status":"published","published":"2020-09-16T19:39:02Z","modified":"2024-08-04T12:46:34.701Z","cwes":["CWE-805"],"updated_at":"2026-11-02T14:35:46.476719Z"}],"euvd":[{"id":"EUVD-2020-6645","description":"Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.","status":"published","published":"2020-09-16T19:39:02Z","modified":"2024-08-04T12:46:34Z","updated_at":"2026-11-03T03:07:34.099541Z"}],"ghsa":[{"id":"GHSA-w97r-xg4x-xx2r","title":"Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where...","description":"Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.","status":"published","published":"2022-05-24T17:28:24Z","modified":"2023-01-29T05:03:52Z","updated_at":"2026-11-02T14:45:25.163341Z"}],"nvd":[{"id":"CVE-2020-14509","description":"Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.","status":"published","published":"2020-09-16T20:15:13.38Z","modified":"2026-06-17T02:54:53.86Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-805"],"updated_at":"2026-11-02T14:06:15.83396Z"}]}}