PT-2026-5290 · Unknown · Barcodeocr

Daniel Bertoni · Publicado 2026-01-29 · Atualizado 2026-01-29 · CVE-2020-37016

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BarcodeOCR version 19.3.6

Description BarcodeOCR 19.3.6 contains an unquoted service path issue that allows local attackers to execute code with elevated privileges during system startup. The unquoted path in the service configuration can be exploited to inject malicious executables that will run with LocalSystem privileges.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-37016

Produtos afetados

Barcodeocr

Referências · 5

• 🔥 https://exploit-db.com/exploits/48740 · Exploit
• https://vulncheck.com/advisories/barcodeocr-barcodeocr-unquoted-service-path · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37016 · Nota de Segurança
• https://t.me/CVEtracker/43239 · Publicação no Telegram
• https://barcode-ocr.com · Nota