CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects Windows. It may be remotely exploitable.
CVE
CVE-2024-40722
Severity
MEDIUM
CVSS
4.3
EPSS
0.48%
Windows
Original NVD Description
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the TCBServiSign, temporarily disrupting its service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)