CVE-2022-39061

Summary

ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthenticated remote attacker can exploit this vulnerability to access partial sensitive content in memory and disrupts partial services.

Affected Software

Weaknesses

• CWE-125: CWE-125 Out-of-bounds Read

ADP Enrichment

CVE Program Container

Additional References

• https://www.twcert.org.tw/tw/cp-132-6888-b5f81-1.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.twcert.org.tw/tw/cp-132-6888-b5f81-1.html

• ←Previous
• Next→