Read the docs

CHANGING

Records42All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9

Exploited now

CHANGING records in CISA KEV

No CHANGING vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Servisign 6 records MEDIUM Rava Certificate Validation System 4 records MEDIUM Tcb Servisign 4 records MEDIUM Megaservisignadapter 3 records MEDIUM Idexpert 2 records MEDIUM Hwatai Servisign 1 record LOW Mobile One Time Password 1 record LOW Motp 1 record LOW

Records

6 records in Servisign · all components

TI-2022-22851 CVE-2022-46304 · GHSA-6fq2-gj2w-987v

ChangingTec ServiSign - Command Injection

Priority MEDIUM 43

ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01538 Published 2023-01-03 No fix listed CWE-78
TI-2020-03425 CVE-2020-3925 · GHSA-pj2x-pp52-f353

ServiSign Windows Versions- Remote Code Execution via LoadLibrary

Priority MEDIUM 43

A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on tar…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02775 Published 2020-02-03 No fix listed
TI-2022-22853 CVE-2022-46306 · GHSA-pjx5-jjh7-w9hw

ChangingTec ServiSign - Path Traversal

Priority MEDIUM 42

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00978 Published 2023-01-03 No fix listed CWE-22
TI-2020-03427 CVE-2020-3927 · GHSA-69h4-9vcf-3h5q

ServiSign Windows Versions- Arbitrary File Deletion

Priority LOW 38

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01205 Published 2020-02-03 No fix listed CWE-552
TI-2020-03426 CVE-2020-3926 · GHSA-77x4-9g68-7hxr

ServiSign Windows Versions- Arbitrary File Access

Priority LOW 36

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01482 Published 2020-02-03 No fix listed CWE-552
TI-2022-22852 CVE-2022-46305 · GHSA-jqp2-v6rv-vqfr

ChangingTec ServiSign - Path Traversal

Priority LOW 29

ChangingTec ServiSign component has a path traversal vulnerability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00409 Published 2023-01-03 No fix listed CWE-22
Open these records in search →