AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-46304

HIGH · CVSS 8.8 EPSS 1.51%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-46304
Severity
HIGH
CVSS
8.8
EPSS
1.51%

Original NVD Description

ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers command injection and allows the attacker to execute arbitrary system command to perform arbitrary system operation or disrupt service.

Related CVEs

Other vulnerabilities affecting the same vendor(s)