critical9.8
CVE-2022-39060
ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation.
Impact
ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability to access and modify HKEY_CURRENT_USER subkey (ex: AutoRUN) in Registry where malicious scripts can be executed to take control of the system or to terminate the service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Changingtec | Megaservisignadapter | before 1.0.22.1004 |