CVE-2022-46304

8.8 highEPSS 1.5%

High (8.8) in changingtec servisign. EPSS 1.5% chance of exploitation in the next 30 days.

ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers command injection and allows the attacker to execute arbitrary system command to perform arbitrary system operation or disrupt service.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2023-01-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

changingtec:servisign

References

https://www.twcert.org.tw/tw/cp-132-6800-b5cf6-1.html
https://www.twcert.org.tw/tw/cp-132-6800-b5cf6-1.html

Check your stack JSON