Lucene search

TwcertCVE-2024-40723

HistoryAug 02, 2024 - 11:16 a.m.

CVE-2024-40723

2024-08-0211:16:43

CWE-787

CWE-121

twcert

web.nvd.nist.gov

hwataiservisign

windows version

changing information technology

api

vulnerable

unauthenticated

remote

stack-based buffer overflow

improper input validation

temporary service disruption

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

17.6%

JSON

The specific API in HWATAIServiSign Windows Version from CHANGING Information Technology does not properly validate the length of server-side inputs. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the HWATAIServiSign, temporarily disrupting its service.

Affected configurations

Nvd

Node

changingtechwatai_servisignRange<1.0.24.0219windows

VendorProductVersionCPE
changingtechwatai_servisign*cpe:2.3:a:changingtec:hwatai_servisign:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
changingtec	hwatai_servisign	*	cpe:2.3:a:changingtec:hwatai_servisign::::::windows::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HWATAIServiSign Windows Version",
    "vendor": "CHANGING Information Technology",
    "versions": [
      {
        "lessThan": "1.0.24.0219",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.twcert.org.tw/en/cp-139-7974-0562f-2.html

www.twcert.org.tw/tw/cp-132-7968-ce2ef-1.html

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

17.6%

JSON

Related for CVE-2024-40723