Known Vulnerabilities for products from Changingtec
Listed below are 15 of the newest known vulnerabilities associated with the vendor "Changingtec".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-22901 json | ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit th... | 4.9 - MEDIUM | 2023-04-27 | 2023-05-05 |
| CVE-2022-46306 json | ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in th... | 7.8 - HIGH | 2023-01-03 | 2023-01-10 |
| CVE-2022-46305 json | ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerab... | 6.5 - MEDIUM | 2023-01-03 | 2023-01-09 |
| CVE-2022-46304 json | ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An un... | 8.8 - HIGH | 2023-01-03 | 2023-01-09 |
| CVE-2022-39061 json | ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for para... | 6.5 - MEDIUM | 2023-01-31 | 2023-02-07 |
| CVE-2022-39060 json | ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attac... | 9.8 - CRITICAL | 2023-01-31 | 2023-02-07 |
| CVE-2022-39059 json | ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unauthent... | 7.5 - HIGH | 2023-01-31 | 2023-02-07 |
| CVE-2022-39058 json | RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this ... | 7.5 - HIGH | 2022-10-18 | 2022-10-20 |
| CVE-2022-39057 json | RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote att... | 7.2 - HIGH | 2022-10-18 | 2023-06-27 |
| CVE-2022-39056 json | RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject ... | 9.8 - CRITICAL | 2022-10-18 | 2022-10-20 |
| CVE-2022-39055 json | RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform... | 5.3 - MEDIUM | 2022-10-18 | 2022-10-20 |
| CVE-2021-44161 json | Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input. A... | 8.8 - HIGH | 2021-12-29 | 2022-01-10 |
| CVE-2020-3927 json | An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API f... | 7.5 - HIGH | 2020-02-03 | 2022-05-25 |
| CVE-2020-3926 json | An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API f... | 7.5 - HIGH | 2020-02-03 | 2022-05-24 |
| CVE-2020-3925 json | A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as th... | 8.8 - HIGH | 2020-02-03 | 2020-02-12 |
Known software with vulnerabilities from Changingtec
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Changingtec | Servisign | 1.0.19.0617 |