Vulnerabilities

TI-2020-15835 CVE-2020-25844 · GHSA-j59v-276v-qwjv

CHANGING Inc. NHIServiSignAdapter Windows Versions - Stack Overflow

MEDIUM 46

The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01978 Published 2020-12-31 No fix listed CWE-121

TI-2020-15834 CVE-2020-25843 · GHSA-6x24-83hx-xqw8

MEDIUM 46

NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01978 Published 2020-12-31 No fix listed CWE-122

TI-2020-15833 CVE-2020-25842 · GHSA-h7qr-pc33-78hj

LOW 33

The encryption function of NHIServiSignAdapter fail to verify the file path input by users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00508 Published 2020-12-31 No fix listed CWE-311