GCVE - cpe:2.3:a:n/a:codemeter:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:codemeter:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Codemeter (`3f260e1f-7eae-595a-b815-c1f40884ff81`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-16233`	vulnerable	2026-06-08 05:19:27.804468	Details available An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data from the heap. Published: 2020-09-16T19:51:20.000Z Updated: 2024-08-04T13:37:53.590Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14519`	vulnerable	2026-06-08 05:19:23.676790	Details available This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected WebSockets API still enabled. This is especially relevant for systems or devices where a web browser is used to access a web server) via a specifically crafted Java Script payload, which may allow alteration or creation of license files for when combined with CVE-2020-14515. Published: 2020-09-16T19:44:16.000Z Updated: 2024-08-04T12:46:34.665Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14517`	vulnerable	2026-06-08 05:19:23.673081	Details available Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server) and the server accepts external connections, which may allow an attacker to remotely communicate with the CodeMeter API. Published: 2020-09-16T19:42:12.000Z Updated: 2024-08-04T12:46:34.990Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14515`	vulnerable	2026-06-08 05:19:23.669285	Details available CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking mechanism, which allows attackers to build arbitrary license files, including forging a valid license file as if it were a valid license file of an existing vendor. Only CmActLicense update files with CmActLicense Firm Code are affected. Published: 2020-09-16T19:48:08.000Z Updated: 2024-08-04T12:46:34.789Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14513`	vulnerable	2026-06-08 05:19:23.666183	Details available CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unverified length fields. Published: 2020-09-16T19:49:37.000Z Updated: 2024-08-04T12:46:34.696Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-203-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14509`	vulnerable	2026-06-08 05:19:23.654157	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.