High severity7.8NVD Advisory· Published Jan 29, 2026· Updated Apr 15, 2026

CVE-2020-37017

Description

CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CodeMeter Runtime Server service to inject malicious code that would execute with LocalSystem permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/48735nvd
www.vulncheck.com/advisories/codemeter-codemeterexe-unquoted-service-pathnvd
www.wibu.com/us/products/codemeter/runtime.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000