Weak Service Permissions in Wibu-Systems CodeMeter Runtime

CVE-2014-8419

What is CVE-2014-8419?

The Wibu-Systems CodeMeter Runtime versions before 5.20 are vulnerable to privilege escalation due to improper permissions set on codemeter.exe. The executable file is accessible for read and write operations by all users, which can lead to exploitation via the introduction of Trojan horse files. Local users could leverage this weakness to gain elevated privileges, posing significant security risks. Organizations utilizing this runtime environment should prioritize updating to the latest version and implementing strict permission settings to mitigate potential threats.

References