Description (CNA)
CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through the local service interface, resulting in command execution on the victim's local computer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Changing / CGServiSign | affected 1.0.23.1227 |
CWE
CWE-78
References
- https://www.twcert.org.tw/tw/cp-132-11213-28a81-1.html
- https://www.twcert.org.tw/en/cp-139-11214-89281-2.html
ADP enrichment
No English description supplied.
No references supplied.