ChangingTec MegaServiSignAdapter - Improper Input Validation

CVE-2022-39060

What is CVE-2022-39060?

The ChangingTech MegaServiSignAdapter component is susceptible to an improper input validation vulnerability that allows an unauthenticated remote attacker to manipulate the Windows Registry's HKEY_CURRENT_USER subkey. Exploitation of this vulnerability can lead to unauthorized access, enabling attackers to execute malicious scripts, potentially taking control of the system or disrupting critical services.

References