Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CHANGING Information Technology TCBServiSign Windows Version - Improper Input Validation
Vulnerability Description
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can modify the `HKEY_CURRENT_USER` registry to execute arbitrary commands.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
输入验证不恰当
Vulnerability Title
Changing TCBServiSign 输入验证错误漏洞
Vulnerability Description
Changing TCBServiSign是中国Changing公司的一个跨平台安控元件。 Changing TCBServiSign 1.0.24.0318之前版本存在输入验证错误漏洞，该漏洞源于特定API没有正确验证服务器端输入，当用户访问欺骗网站时，未经身份验证的远程攻击者可以修改注册表以执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A