CVE-2020-25843CWE-122
CHANGING Inc. NHIServiSignAdapter Windows Versions - Heap Overflow
High · published December 31, 2020
What it is
NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to execute code without privilege.
The record
Technical detail
- CVSS v3.1
- 8.1 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.01978 · 80.4th percentile
- Weakness
- CWE-122 · Heap-based Buffer Overflow
- Published
- 2020-12-31T07:45Z
EPSS history
Timeline