CVE-2020-14519CWE-346

This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer…

published September 16, 2020

CVSS
—
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected WebSockets API still enabled. This is especially relevant for systems or devices where a web browser is used to access a web server) via a specifically crafted Java Script payload, which may allow alteration or creation of license files for when combined with CVE-2020-14515.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00637 · 49.9th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2020-09-16T19:44Z
EPSS history
Timeline
  • 16 SEP 19:44Z
    This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer…
    cvelistv5