Not rated
CVE-2020-14515 CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue…
Description
CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking mechanism, which allows attackers to build arbitrary license files, including forging a valid license file as if it were a valid license file of an existing vendor. Only CmActLicense update files with CmActLicense Firm Code are affected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CodeMeter | Versions not published |
Other CVEs of CodeMeter
The 6 CVEs of CodeMeter →
CVE-2020-16233
An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back…
Not rated
CVE-2020-14513
CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted…
Not rated
CVE-2020-14519
This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are…
Not rated
CVE-2020-14517
Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version…
Not rated