CVE-2020-37017: CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path
CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CodeMeter Runtime Server service to inject malicious code that would execute with LocalSystem permissions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37017?
CVE-2020-37017 has a medium severity score due to its potential for local exploitation leading to arbitrary code execution with elevated privileges.
How do I fix CVE-2020-37017?
To fix CVE-2020-37017, ensure that the service path for CodeMeter is correctly quoted to prevent exploitation.
What is the impact of CVE-2020-37017?
The impact of CVE-2020-37017 allows local users to execute arbitrary code, potentially compromising the security of the affected system.
Who is affected by CVE-2020-37017?
Users of CodeMeter 6.60 are affected by CVE-2020-37017 due to the vulnerability in the CodeMeter Runtime Server service.
Is there a patch available for CVE-2020-37017?
Yes, a patch is typically provided by Wibu for CVE-2020-37017, and it is recommended to update to the latest version of CodeMeter.