Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2020-14498

CVE-2020-14498CRITICAL

HMS Industrial Networks AB eCatcher Stack-based Buffer Overflow

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  H  H  H   10.0   .0398   90.2     —

AFFECTED
  Product   Versions     Fixed
  eCatcher  unspecified  6.5.5

TIMELINE
  Jun 19  Reserved by icscert
  Aug 26  Published (CNA: icscert)
  Sep 10  RESCORED — CVE-2020-14498 (HMS Industrial Networks AB eCatcher). CVSS 9.6 → 10 (NVD).

CWE-787, CWE-121 · CNA: icscert · CVSS v3.1 · 3 references · NVD status: Modified

Description

HMS Industrial Networks AB eCatcher all versions prior to 6.5.5 is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
June 19, 2020	Reserved	Reserved by icscert
August 26, 2020	Published	Published (CNA: icscert)
September 10, 2026	RESCORED	RESCORED — CVE-2020-14498 (HMS Industrial Networks AB eCatcher). CVSS 9.6 → 10 (NVD).

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
HMS Industrial Networks AB	eCatcher	—	—	6.5.5

Weaknesses

CWE-787 · CWE-121

References (3)

https://us-cert.cisa.gov/ics/advisories/icsa-20-210-03 [Third Party Advisory, US Government Resource]
https://www.cisa.gov/news-events/ics-advisories/icsa-20-210-03
https://www.hms-networks.com/cybersecurity/security-advisories

Authoritative record: CVE-2020-14498 at cve.org

Vendors: hms industrial networks ab

Weaknesses: CWE-787 · CWE-121

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2020-14498 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.