PT-2023-30290 · Unknown · Codemeter Runtime

Published 2023-09-13 · Updated 2023-11-01 · CVE-2023-4701

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions CodeMeter Runtime versions prior to 7.60c

Description The issue is related to an Improper Privilege Management vulnerability, which occurs due to the incorrect use of privileged APIs in CodeMeter Runtime. This allows a local, low-privileged attacker to use an API call for escalation of privileges, potentially gaining full admin access on the host system.

Recommendations For CodeMeter Runtime versions prior to 7.60c, update to version 7.60c or later to resolve the issue. As a temporary workaround, consider restricting access to privileged APIs to minimize the risk of exploitation.

Related Identifiers

CVE-2023-4701

Affected Products

Codemeter Runtime

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-4701 · Security Note
• https://t.me/cibsecurity/70390 · Telegram Post
• https://twitter.com/CVEnew/status/1701953477889646727 · Twitter Post
• https://twitter.com/cracbot/status/1702200557434487088 · Twitter Post