CVE-2021-20094

概要

参考情報

• cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-210423-02.pdf · Mitigation
• cert-portal.siemens.com/productcert/pdf/ssa-675303.pdf · Patch
• us-cert.cisa.gov/ics/advisories/icsa-21-210-02 · Third Party Advisory
• tenable.com/security/research/tra-2021-24 · Exploit

codemeter のその他の脆弱性

• CVE-2021-20093緊急 9.1A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issu…
• CVE-2020-16233高 7.5An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data f…
• CVE-2020-14519高 7.5This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including V…
• CVE-2020-14517緊急 9.8Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if Cod…
• CVE-2020-14515高 7.5CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file sig…