CVE-2022-39060 - Vulnerability Details - OpenCVE

ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability to access and modify HKEY_CURRENT_USER subkey (ex: AutoRUN) in Registry where malicious scripts can be executed to take control of the system or to terminate the service.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Changingtec	Megaservisignadapter

Configuration 1 [-]

cpe:2.3:a:changingtec:megaservisignadapter:*:*:*:*:*:windows:*:*

No data.

References

Link	Providers
https://www.twcert.org.tw/tw/cp-132-6887-6ed4f-1.html

History

Thu, 27 Mar 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: twcert

Published: 2023-01-31T00:00:00.000Z

Updated: 2025-03-27T18:22:55.303Z

Reserved: 2022-08-31T00:00:00.000Z

Link: CVE-2022-39060

Vulnrichment

Updated: 2024-08-03T11:10:32.286Z

NVD

Status : Modified

Published: 2023-01-31T08:15:08.090

Modified: 2024-11-21T07:17:28.613

Link: CVE-2022-39060

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-39060", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "assignerShortName": "twcert", "dateUpdated": "2025-03-27T18:22:55.303Z", "dateReserved": "2022-08-31T00:00:00.000Z", "datePublished": "2023-01-31T00:00:00.000Z"}, "containers": {"cna": {"title": "ChangingTec MegaServiSignAdapter - Improper Input Validation", "datePublic": "2023-01-31T00:00:00.000Z", "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2023-01-31T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability to access and modify HKEY_CURRENT_USER subkey (ex: AutoRUN) in Registry where malicious scripts can be executed to take control of the system or to terminate the service."}], "affected": [{"vendor": "ChangingTec", "product": "MegaServiSignAdapter", "versions": [{"version": "1.0.17.0823", "status": "affected"}], "platforms": ["Windows"]}], "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-6887-6ed4f-1.html"}], "credits": [{"lang": "en", "value": "DEVCORE"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-20 Improper Input Validation", "cweId": "CWE-20"}]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "source": {"advisory": "TVN-202212009", "discovery": "EXTERNAL"}, "solutions": [{"lang": "en", "value": "Update MegaServiSignAdapter (Windows) version to 1.0.22.1004"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T11:10:32.286Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-6887-6ed4f-1.html", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-27T18:22:47.180000Z", "id": "CVE-2022-39060", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-27T18:22:55.303Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-6887-6ed4f-1.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T11:10:32.286Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-39060", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-27T18:22:47.180000Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-27T18:22:51.964Z"}}], "cna": {"title": "ChangingTec MegaServiSignAdapter - Improper Input Validation", "source": {"advisory": "TVN-202212009", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "value": "DEVCORE"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "ChangingTec", "product": "MegaServiSignAdapter", "versions": [{"status": "affected", "version": "1.0.17.0823"}], "platforms": ["Windows"]}], "solutions": [{"lang": "en", "value": "Update MegaServiSignAdapter (Windows) version to 1.0.22.1004"}], "datePublic": "2023-01-31T00:00:00.000Z", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-6887-6ed4f-1.html"}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability to access and modify HKEY_CURRENT_USER subkey (ex: AutoRUN) in Registry where malicious scripts can be executed to take control of the system or to terminate the service."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2023-01-31T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2022-39060", "state": "PUBLISHED", "dateUpdated": "2025-03-27T18:22:55.303Z", "dateReserved": "2022-08-31T00:00:00.000Z", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "datePublished": "2023-01-31T00:00:00.000Z", "assignerShortName": "twcert"}, "dataVersion": "5.1"}