Security Advisory

CVE-2024-40720

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-08-02 10:10:16

Last updated 2024-08-02 16:08:16

Assigner twcert

CVSS score 8.8

State PUBLISHED

Description

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can modify the `HKEY_CURRENT_USER` registry to execute arbitrary commands.

← Browse all CVEs View on cve.org ↗