CVE-2023-4701

Name of the Vulnerable Software and Affected Versions CodeMeter Runtime versions prior to 7.60c

Description The issue is related to an Improper Privilege Management vulnerability, which occurs due to the incorrect use of privileged APIs in CodeMeter Runtime. This allows a local, low-privileged attacker to use an API call for escalation of privileges, potentially gaining full admin access on the host system.

Recommendations For CodeMeter Runtime versions prior to 7.60c, update to version 7.60c or later to resolve the issue. As a temporary workaround, consider restricting access to privileged APIs to minimize the risk of exploitation.