6.5
CVE-2024-40719
- EPSS 0.18%
- Veröffentlicht 02.08.2024 10:16:00
- Zuletzt bearbeitet 09.08.2024 14:36:32
- Quelle twcert@cert.org.tw
- CVE-Watchlists
- Unerledigt
LoginCHANGING Information Technology TCBServiSign Windows Version - Inadequate Encryption Strength
The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker tricks a victim into visiting a malicious website, TCBServiSign will treat that website as a legitimate server and interact with it.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Changingtec ≫ Tcb Servisign SwPlatformwindows Version < 1.0.24.0318
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.071 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| twcert@cert.org.tw | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
|
CWE-326 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
https://www.twcert.org.tw/en/cp-139-7970-e8ac5-2.html
https://www.twcert.org.tw/tw/cp-132-7964-5b266-1.html