CVE-2020-3925

ServiSign Windows Versions- Remote Code Execution via LoadLibrary

High · published February 3, 2020

CVSS v3.1
8.3
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on target system via malicious crafted scripts.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02775 · 86.3th percentile
Published
2020-02-03T11:00Z
EPSS history
Timeline
  • 03 FEB 11:00Z
    ServiSign Windows Versions- Remote Code Execution via LoadLibrary
    cvelistv5