CVE-2021-20094

Name of the Vulnerable Software and Affected Versions Wibu-Systems CodeMeter versions prior to 7.21a

Description A denial of service issue exists, allowing an unauthenticated remote attacker to crash the CodeMeter Runtime Server by exploiting a buffer overflow in the HTTP(S) service of the CmWAN application. This can be achieved through a specially crafted HTTP(S) request.

Recommendations For versions prior to 7.21a, update to version 7.21a or later to resolve the issue.