MegaServiSignAdapter vulnerabilities

2 known vulnerabilities in MegaServiSignAdapter from ChangingTec. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation.

  CVE-2022-39060Jan 31, 2023ChangingTec

  ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability to access and modify HKEY_CURRENT_USER subkey (ex: AutoRUN) in Registry where malicious scripts can

• 7.5 High severity

  MegaServiSignAdapter: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-39059Jan 31, 2023ChangingTecEPSS 1.03%

  ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.