CVE-2020-37017 – CodeMeter 6.60 – ‘CodeMeter.exe’ Unquoted Service Path

CVE ID : CVE-2020-37017

Published : Jan. 29, 2026, 2:28 p.m. | 41 minutes ago

Description : CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CodeMeter Runtime Server service to inject malicious code that would execute with LocalSystem permissions.

Severity: 8.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…