Vulnerability · Published Feb 3, 2020 · Assigned by twcert
CVE-2020-3926ServiSign Windows Versions- Arbitrary File Access
Medium 6.1
In plain English
A medium-severity security flaw in ServiSign Windows versions from CHANGING. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities).
Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)1.5%top 25.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| CHANGING | ServiSign Windows versions | 0 – through 1.0.19.0617 |
References
- https://tvn.twcert.org.tw/taiwanvn/TVN-201910006 x_refsource_MISC
- https://www.chtsecurity.com/news/1179d48b-7609-4f67-9d7e-3bac2979c6ce x_refsource_MISC