ServiSign vulnerabilities

3 known vulnerabilities in ServiSign from ChangingTec. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not…

  CVE-2024-40721Aug 2, 2024CHANGING Information Technology

  The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCBServiSign to load a DLL from an arbitrar

• 7.8 High severity

  ServiSign: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-46306Jan 3, 2023ChangingTec

  ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the c

• 8.8 High severity

  ServiSign: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-46304Jan 3, 2023ChangingTecEPSS 1.54%

  ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers command injection and allow