Changingtec Servisign
6 CVEs affecting Changingtec Servisign. Latest disclosed: 2023-01-03. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-46306 | High | 8.8 | 2023-01-03 | ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticate… |
CVE-2022-46304 | High | 8.8 | 2023-01-03 | ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote attacker can… |
CVE-2020-3927 | High | 8.3 | 2020-02-03 | An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary… |
CVE-2020-3925 | High | 8.3 | 2020-02-03 | A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers… |
CVE-2022-46305 | Medium | 6.5 | 2023-01-03 | ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and… |
CVE-2020-3926 | Medium | 6.1 | 2020-02-03 | An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary… |