CVE-2020-14509

critical

Description

Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01

https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01

https://www.tenable.com/blog/multiple-vulnerabilities-in-codemeter-leave-managed-industrial-control-systems-open-to-attack

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6645

Details

Source: Mitre, NVD

Published: 2020-09-16

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.0207

Detections

Analytics