Vulnerabilities > CVE-2024-40722 - Out-of-bounds Write vulnerability in Changingtec TCB Servisign
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
LOW Summary
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the TCBServiSign, temporarily disrupting its service.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |