Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-14515

20
FAUCET Score

CVE-2020-14515 is a critical vulnerability in CodeMeter versions prior to 6.90, specifically impacting CmActLicense update files with CmActLicense Firm Code. This flaw allows attackers to forge valid license files, potentially enabling unauthorized software use. With a CVSS score of 7.5 (HIGH), it is a network-exploitable vulnerability with low attack complexity, leading to high integrity impact without requiring user interaction. While there is no evidence of active exploitation or publicly available exploit code, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.

Impacted Technologies

VendorProductVersion(s)CPE
< 6.90CPE matchmatch criteria
cpe:2.3:a:wibu:codemeter:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.84%
Probability of exploitation in next 30 days
EPSS Percentile
54.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0084 is in the 29th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (5)

amazonvendor investigatingvia llm_extracted
apollographqlvendor investigatingvia llm_extracted
dfinityvendor investigatingvia llm_extracted
fleetdmvendor investigatingvia llm_extracted
mathworksvendor investigatingvia llm_extracted

Vendor Advisories (5)

fleetdmllm-fleetdm-ce3414dafcd3ec60CRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
amazonllm-amazon-64bced238e9d2a3aCRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
apollographqlllm-apollographql-fd74a7b0a4a6838bCRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
dfinityllm-dfinity-c853f523c559648fCRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
mathworksllm-mathworks-e88e9e16d61f6d98CRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020

References

us-cert.cisa.gov / ics/advisories/icsa-20-203-01
Third Party AdvisoryUS Government Resource