Insufficient Encryption Threatens TCBServiSign Windows Version

CVE-2024-40719

6.5MEDIUM

Key Information

Vendor: CHANGING Information Technology
Status: Tcb Servisign
Vendor: CVE Published:; 2 August 2024

Summary

The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker tricks a victim into visiting a malicious website, TCBServiSign will treat that website as a legitimate server and interact with it.

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published.
Aug 2, 2024

Collectors

NVD Database