Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-39060 EUVD-2022-41606GHSA-c653-695r-xprr

ChangingTec MegaServiSignAdapter - Improper Input Validation

Published Jan 31, 2023 · Updated Mar 27, 2025 · Assigned by twcert

Description

ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability to access and modify HKEY_CURRENT_USER subkey (ex: AutoRUN) in Registry where malicious scripts can be executed to take control of the system or to terminate the service.

Affected products

VendorProductAffectedFixed
ChangingTec MegaServiSignAdapter 1.0.17.0823 —

References