PT-2026-5290 · Unknown · Barcodeocr

Daniel Bertoni · Published 2026-01-29 · Updated 2026-01-29 · CVE-2020-37016

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BarcodeOCR version 19.3.6

Description BarcodeOCR 19.3.6 contains an unquoted service path issue that allows local attackers to execute code with elevated privileges during system startup. The unquoted path in the service configuration can be exploited to inject malicious executables that will run with LocalSystem privileges.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37016

Affected Products

Barcodeocr

References · 5

• 🔥 https://exploit-db.com/exploits/48740 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37016 · Security Note
• https://vulncheck.com/advisories/barcodeocr-barcodeocr-unquoted-service-path · Note
• https://t.me/CVEtracker/43239 · Telegram Post
• https://barcode-ocr.com · Note