Vulnerabilities > CVE-2024-40723 - Out-of-bounds Write vulnerability in Changingtec Hwatai Servisign

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
LOW
network
low complexity
changingtec
CWE-787

Summary

The specific API in HWATAIServiSign Windows Version from CHANGING Information Technology does not properly validate the length of server-side inputs. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the HWATAIServiSign, temporarily disrupting its service.

Vulnerable Configurations

Part Description Count
Application
Changingtec
1

Common Weakness Enumeration (CWE)