Skip to content
OpenAdvisories
High · 8.3 CVE-2020-3925 EUVD-2020-25190GHSA-pj2x-pp52-f353

ServiSign Windows Versions- Remote Code Execution via LoadLibrary

Published Feb 3, 2020 · Updated Sep 17, 2024 · Assigned by twcert

Description

A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on target system via malicious crafted scripts.

Affected products

VendorProductAffectedFixed
CHANGING ServiSign Windows versions ≤ 1.0.19.0617 —

References