IM
IronMonkey Threat Research

CVE-2026-81573 HIGH

Published: 2026-08-27 | Last Modified: 2026-09-01 | Status: Awaiting Analysis

Description

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially sensitive configuration data and overwrite selected values in Server.ini. This does include the hash of the credentials for the CodeMeter WebAdmin, enabling WebAdmin takeover.

CVSS Metrics

Base Score: 8.6 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactLOW
Integrity ImpactHIGH
Availability ImpactLOW

Source: 2fc02b1f-71e7-4514-a878-169626f68903

Type: Secondary

Exploitability Score: 3.9

Impact Score: 4.7

Weaknesses

Source Type Description
2fc02b1f-71e7-4514-a878-169626f68903 Secondary
en CWE-284
Notification
Message here