ChangingTec MegaServiSignAdapter - Out-of-bounds Read
CVE-2022-39061

6.5MEDIUM

Key Information:

Vendor

Changingtec

Status
Megaservisignadapter
Vendor
CVE Published:
31 January 2023

What is CVE-2022-39061?

ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthenticated remote attacker can exploit this vulnerability to access partial sensitive content in memory and disrupts partial services.

Affected Version(s)

MegaServiSignAdapter Windows 1.0.17.0823

References

https://www.twcert.org.tw/tw/cp-132-6888-b5f81-1.html

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

DEVCORE
.