Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-14517

25
FAUCET Score

CVE-2020-14517 describes a critical vulnerability in Wibu CodeMeter, affecting all versions prior to 6.90 and newer versions if CodeMeter Runtime is running as a server accepting external connections. The flaw allows an attacker to easily break protocol encryption, enabling remote communication with the CodeMeter API. With a CVSS score of 9.8 (CRITICAL), this vulnerability has a network attack vector, low attack complexity, and can lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has garnered some community discussion and media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 6.90CPE matchmatch criteria
cpe:2.3:a:wibu:codemeter:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.67%
Probability of exploitation in next 30 days
EPSS Percentile
48.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0067 is in the 30th percentile among its peer group of 36,835 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (5)

amazonvendor investigatingvia llm_extracted
apollographqlvendor investigatingvia llm_extracted
dfinityvendor investigatingvia llm_extracted
fleetdmvendor investigatingvia llm_extracted
mathworksvendor investigatingvia llm_extracted

Vendor Advisories (5)

fleetdmllm-fleetdm-ce3414dafcd3ec60CRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
amazonllm-amazon-64bced238e9d2a3aCRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
apollographqlllm-apollographql-fd74a7b0a4a6838bCRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
dfinityllm-dfinity-c853f523c559648fCRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020
mathworksllm-mathworks-e88e9e16d61f6d98CRITICAL

WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products

Sep 25, 2020

References

us-cert.cisa.gov / ics/advisories/icsa-20-203-01
Third Party AdvisoryUS Government Resource