PT-2026-5291 · Wibu Systems · Codemeter

Luis Martinez · Publicado 2026-01-29 · Atualizado 2026-02-09 · CVE-2020-37017

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CodeMeter version 6.60

Description CodeMeter 6.60 contains an unquoted service path that may allow local users to execute arbitrary code with elevated system privileges. An attacker can exploit the unquoted binary path in the CodeMeter Runtime Server service to inject malicious code that would execute with LocalSystem permissions.

Recommendations Ensure the service path for CodeMeter Runtime Server is properly quoted.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-37017

Produtos afetados

Codemeter

Referências · 6

• 🔥 https://exploit-db.com/exploits/48735 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37017 · Nota de Segurança
• https://t.me/cveNotify/151456 · Publicação no Telegram
• https://t.me/CVEtracker/43240 · Publicação no Telegram
• https://wibu.com/us/products/codemeter/runtime.html · Nota
• https://vulncheck.com/advisories/codemeter-codemeterexe-unquoted-service-path · Nota