Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CHANGING Information Technology TCBServiSign Windows Version - Improper Input Validation
Vulnerability Description
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCBServiSign to load a DLL from an arbitrary path.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
输入验证不恰当
Vulnerability Title
Changing TCBServiSign 输入验证错误漏洞
Vulnerability Description
Changing TCBServiSign是中国Changing公司的一个跨平台安控元件。 Changing TCBServiSign 1.0.24.0318之前版本存在输入验证错误漏洞，该漏洞源于特定API不能正确验证服务器端输入，当用户访问欺骗网站时，未经身份验证的远程攻击者可以从任意路径加载DLL。
CVSS Information
N/A
Vulnerability Type
N/A