CVE-2020-14515: wibu codemeter
Vulnerability summary
CVE-2020-14515 is a high (CVSS 7.5) vulnerability in wibu codemeter. EPSS estimates a 0.84% chance of exploitation in the next 30 days, higher than 57% of scored vulnerabilities.
Timeline
- 16-09-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking mechanism, which allows attackers to build arbitrary license files, including forging a valid license file as if it were a valid license file of an existing vendor. Only CmActLicense update files with CmActLicense Firm Code are affected.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.84%
Chance of exploitation in the next 30 days
Percentile
57%
Versus all other CVEs
30-day change
0.00 pp
From 0.84% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Wibu1 product
- codemeter< 6.90
1 vendor · 1 product
References
1 links
us-cert.cisa.gov/ics/advisories/icsa-20-203-01X Refsource MISCThird Party AdvisoryUS Government Resource