Vulnerability Description
A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on target system via malicious crafted scripts.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Changingtec | Servisign | <= 1.0.19.0617 |
| Microsoft | Windows | - |
References
- https://tvn.twcert.org.tw/taiwanvn/TVN-201910005Third Party Advisory
- https://www.chtsecurity.com/news/1179d48b-7609-4f67-9d7e-3bac2979c6ceThird Party Advisory
- https://tvn.twcert.org.tw/taiwanvn/TVN-201910005Third Party Advisory
- https://www.chtsecurity.com/news/1179d48b-7609-4f67-9d7e-3bac2979c6ceThird Party Advisory
FAQ
What is CVE-2020-3925?
CVE-2020-3925 is a vulnerability with a CVSS score of 8.3 (HIGH). A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbi...
How severe is CVE-2020-3925?
CVE-2020-3925 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-3925?
Check the references section above for vendor advisories and patch information. Affected products include: Changingtec Servisign, Microsoft Windows.