ChangingTec ServiSign - Command Injection

CVE-2022-46304

What is CVE-2022-46304?

The ChangingTec ServiSign component exhibits a critical flaw due to inadequate filtering of special characters in the connection response parameter. This vulnerability allows unauthenticated remote attackers to craft malicious websites that, when accessed by users of the component, can trigger command injection attacks. As a consequence, attackers can execute arbitrary system commands, potentially leading to unauthorized operations or service disruptions.

References