CVE-2024-40721 | BDVDB-2026-244449 Detail
CHANGING Information TechnologyTCBServiSign Windows Version
Description#
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCBServiSign to load a DLL from an arbitrary path.
Impact#
CAPEC-251 Local Code Inclusion
Weaknesses#
- CWE-20 Improper Input Validation
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.