Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: CHANGING Component: Servisign Clear all filters
TI-2022-22853 CVE-2022-46306 · GHSA-pjx5-jjh7-w9hw

ChangingTec ServiSign - Path Traversal

Priority MEDIUM 42

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00978 Published 2023-01-03 No fix listed CWE-22
TI-2022-22852 CVE-2022-46305 · GHSA-jqp2-v6rv-vqfr

ChangingTec ServiSign - Path Traversal

Priority LOW 29

ChangingTec ServiSign component has a path traversal vulnerability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00409 Published 2023-01-03 No fix listed CWE-22
TI-2022-22851 CVE-2022-46304 · GHSA-6fq2-gj2w-987v

ChangingTec ServiSign - Command Injection

Priority MEDIUM 43

ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01538 Published 2023-01-03 No fix listed CWE-78
TI-2020-03427 CVE-2020-3927 · GHSA-69h4-9vcf-3h5q

ServiSign Windows Versions- Arbitrary File Deletion

Priority LOW 38

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01205 Published 2020-02-03 No fix listed CWE-552
TI-2020-03426 CVE-2020-3926 · GHSA-77x4-9g68-7hxr

ServiSign Windows Versions- Arbitrary File Access

Priority LOW 36

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01482 Published 2020-02-03 No fix listed CWE-552
TI-2020-03425 CVE-2020-3925 · GHSA-pj2x-pp52-f353

ServiSign Windows Versions- Remote Code Execution via LoadLibrary

Priority MEDIUM 43

A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on tar…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02775 Published 2020-02-03 No fix listed