CVE-2020-37017
HIGHCodeMeter 6.60 - Privilege Escalation
Title source: llmDescription
CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CodeMeter Runtime Server service to inject malicious code that would execute with LocalSystem permissions.
Exploits (1)
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
2.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-428
Status
draft
Timeline
Published
Jan 29, 2026
Tracked Since
Feb 18, 2026