Wibu-Systems CodeMeter Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

An unquoted service path vulnerability has been identified in Wibu-Systems CodeMeter version 6.60. This vulnerability allows local users to execute arbitrary code with elevated privileges. The issue arises from the unquoted binary path of the CodeMeter Runtime Server service, which can be exploited to inject malicious code that executes with LocalSystem rights.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code with elevated system privileges.

Reproduction

The vulnerability can be reproduced by creating a service with an unquoted path that includes spaces. This can be done using the Windows Service Control Manager (SC) command. Once the service is created, a local user can exploit the unquoted service path to execute malicious code with elevated privileges.