← CVE Intelligence

CVE-2021-37909

CHANGING Inc. TSSServiSignAdapter Windows Versions - Improper Input Validation PUBLISHED

Description (CNA)

WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus perform hijack attacks to execute arbitrary code.

Affected (CNA)

Vendor / productVersions
CHANGING Inc. / TSSServiSignAdapteraffected unspecified through 1.0.20.0316

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.