CVE-2022-39059

CVE-2022-39059 affects ChangingTech MegaServiSignAdapter. The file-reading function has a path traversal vulnerability that can be exploited by an unauthenticated remote attacker to read arbitrary system files. CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, complexity LOW, privileges NONE...

CVE-2022-39061

CVE-2022-39061 affects ChangingTech’s MegaServiSignAdapter. The issue is an Out-of-bounds Read caused by insufficient validation for parameter length, enabling an unauthenticated remote attacker to access partial sensitive content in memory and disrupt partial services. CVSSv3.1 base score is 6.5...

CVE-2022-39060

ChangingTech MegaServiSignAdapter has a vulnerability in improper input validation that can be exploited remotely by an unauthenticated attacker to access and modify the HKEY_CURRENT_USER registry (e.g., AutoRUN). This could allow execution of malicious scripts to take control of the system or te...