← Back to browse · API

CVE-2021-37909

Severity
CRITICAL
CVSS
9.8
EPSS
0.02007
Risk score
39.9
CISA KEV
No
PoC
No
Published
2021-09-15
Modified
2024-09-17
First seen
2026-08-07
Aliases
EUVD-2021-24387, GHSA-7WG8-6XC4-8GFW
Products
CHANGING Inc.:TSSServiSignAdapter unspecified ≤1.0.20.0316
Sources
euvd EUVD-2021-24387

Description

WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus perform hijack attacks to execute arbitrary code.

References