CVE-2020-14519 is a high-severity vulnerability affecting Wibu CodeMeter versions prior to 7.00, and newer versions with the WebSockets API enabled. It allows an unauthenticated attacker to manipulate or create license files through a specially crafted JavaScript payload targeting the internal WebSockets API. With a CVSS score of 7.5, this vulnerability has a network attack vector and low attack complexity, leading to high integrity impact. There is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, though it has garnered some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 7.00CPE matchmatch criteria | cpe:2.3:a:wibu:codemeter:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products
Sep 25, 2020WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products
Sep 25, 2020WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products
Sep 25, 2020WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products
Sep 25, 2020WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products
Sep 25, 2020