PT-2026-5291 · Wibu Systems · Codemeter

Luis Martinez · Published 2026-01-29 · Updated 2026-02-09 · CVE-2020-37017

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CodeMeter version 6.60

Description CodeMeter 6.60 contains an unquoted service path that may allow local users to execute arbitrary code with elevated system privileges. An attacker can exploit the unquoted binary path in the CodeMeter Runtime Server service to inject malicious code that would execute with LocalSystem permissions.

Recommendations Ensure the service path for CodeMeter Runtime Server is properly quoted.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37017

Affected Products

Codemeter

References · 6

• 🔥 https://exploit-db.com/exploits/48735 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37017 · Security Note
• https://t.me/cveNotify/151456 · Telegram Post
• https://t.me/CVEtracker/43240 · Telegram Post
• https://wibu.com/us/products/codemeter/runtime.html · Note
• https://vulncheck.com/advisories/codemeter-codemeterexe-unquoted-service-path · Note