CVE-2020-3925 ServiSign Windows Versions- Remote Code Execution via LoadLibrary
Attackers can execute arbitrary commands on target systems via malicious scripts in ServiSign Windows applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-3925?
CVE-2020-3925 is a high-severity code injection vulnerability in CHANGING ServiSign Windows versions, published on 3 Feb 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on target system via malicious crafted scripts.
Which versions are affected by CVE-2020-3925?
It affects 1 product.
Products include Changingtec Servisign.
How do I fix CVE-2020-3925?
No fix has been published for CVE-2020-3925 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2020-3925 being exploited?
There is no known exploitation of CVE-2020-3925 in the wild and no public exploit code.
Other vulnerabilities in CHANGING ServiSign Windows versions
Sources
Also known as GHSA-pj2x-pp52-f353.