HIGH🇬🇧 English

CVE-2014-8419

CVSS 7.2v2.0pub. 2014-11-26upd. 2026-05-06

Wibu-Systems CodeMeter Runtime before 5.20 uses weak permissions (read and write access for all users) for codemeter.exe, which allows local users to gain privileges via a Trojan horse file.

oryginał EN
CVSS Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Wibu Codemeter Runtime

    APP
    Wibu
    ≤ 5.10c
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-3935CRITICAL9.8ten sam produkt

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an u...

CVE-2021-41057HIGH7.1ten sam produkt

In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked f...

CVE-2011-4057MEDIUM5.0ten sam produkt

Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attacker...

CVE-2021-20093CRITICAL9.1ten sam vendor

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote ...

CVE-2020-14509CRITICAL9.8ten sam vendor

Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet pa...