EUVD-2020-6651

Malware in sbrugna...

The vulnerability of the WebSockets API component of the CodeMeter license control application allows a perpetrator to gain unauthorized access to modify or create license files for CmActLicense.

The vulnerability of the WebSockets API of the CodeMeter license control application is related to a data source confirmation error. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to modify or create CmActLicense license files...

CodeMeter < 6.90 License forging Vulnerability

According to its self-reported version, the CodeMeter WebAdmin server installed on the remote host is prior to 6.90. It is affected by an issue in the license-file signature checking mechanism, which allows attackers to build arbitrary license files, including forging a valid license file as if i...

Code injection

CodeMeter All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code has an issue in the license-file signature checking mechanism, which allows attackers to build arbitrary license files, including forging a valid license file as if it were a valid license file o...

CVE-2020-14515: Improper Verification of Cryptographic Signature

CodeMeter All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code has an issue in the license-file signature checking mechanism, which allows attackers to build arbitrary license files, including forging a valid license file as if it were a valid license file o...

PT-2020-6603

Name of the Vulnerable Software and Affected Versions CodeMeter versions prior to 6.90 Description The issue is related to errors in the cryptographic signature checking mechanism of the CmActLicense component in the CodeMeter license control application. This allows attackers to build arbitrary...

PT-2020-3962

Name of the Vulnerable Software and Affected Versions: CodeMeter versions prior to 7.00 Description: The issue is related to a component of the WebSockets API in the CodeMeter license control application, which is associated with a data source confirmation error. This can be exploited by a remote...