Vulnerability · Published Feb 3, 2020 · Assigned by twcert
CVE-2020-3927ServiSign Windows Versions- Arbitrary File Deletion
High 8.3
In plain English
A high-severity security flaw in ServiSign Windows versions from CHANGING. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)1.2%top 31.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| CHANGING | ServiSign Windows versions | 0 – through 1.0.19.0617 |
References
- https://tvn.twcert.org.tw/taiwanvn/TVN-201910007 x_refsource_MISC
- https://www.chtsecurity.com/news/1179d48b-7609-4f67-9d7e-3bac2979c6ce x_refsource_MISC