← Database

CVE-2022-39060

CRITICAL CVSS: 9.8 Published: 2023-01-31 Modified: 2026-06-17

Description

ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability to access and modify HKEY_CURRENT_USER subkey (ex: AutoRUN) in Registry where malicious scripts can be executed to take control of the system or to terminate the service.

Affected Platforms

Changingtec Megaservisignadapter

Weakness Type

CWE-20

References