medium6.5
CVE-2024-40719
The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient.
Impact
The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker tricks a victim into visiting a malicious website, TCBServiSign will treat that website as a legitimate server and interact with it.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Changingtec | Tcb Servisign | before 1.0.24.0318 |