ChangingTec ServiSign - Command Injection
CVE-2022-46304

8.8HIGH

Key Information:

Vendor

Changingtec

Status
Servisign
Vendor
CVE Published:
3 January 2023

What is CVE-2022-46304?

The ChangingTec ServiSign component exhibits a critical flaw due to inadequate filtering of special characters in the connection response parameter. This vulnerability allows unauthenticated remote attackers to craft malicious websites that, when accessed by users of the component, can trigger command injection attacks. As a consequence, attackers can execute arbitrary system commands, potentially leading to unauthorized operations or service disruptions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

ServiSign 0

References

https://www.twcert.org.tw/tw/cp-132-6800-b5cf6-1.html

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.