PT-2020-17801 · Servisign · Servisign Security Plugin

Keniver Wang + 1 · Published 2020-02-03 · Updated 2020-02-12 · CVE-2020-3925

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ServiSign security plugin (affected versions not specified)

Description A Remote Code Execution issue exists in certain applications of the ServiSign security plugin. This allows attackers to execute arbitrary commands on the target system via maliciously crafted scripts, as long as the interface is captured.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-3925

Affected Products

Servisign Security Plugin

References · 4

• https://osv.dev/vulnerability/CVE-2020-3925 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3925 · Security Note
• https://chtsecurity.com/news/1179d48b-7609-4f67-9d7e-3bac2979c6ce · Note
• https://tvn.twcert.org.tw/taiwanvn/TVN-201910005 · Note