CVE-2021-37909

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus perform hijack attacks to execute arbitrary code.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
CHANGING Inc.	TSSServiSignAdapter	>= unspecified, <= 1.0.20.0316

References

https://www.twcert.org.tw/tw/cp-132-5093-76f04-1.htmlThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-5093-76f04-1.htmlThird Party Advisory

Timeline

Published: Sep 15, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-37916.5An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated at CVE-2021-379105.3ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthentic CVE-2021-379118.8The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any sy CVE-2021-379129.8The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting p CVE-2021-379139.8The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page CVE-2021-379146.5In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users are allowed to specify input parameters when running CVE-2021-379158.8An issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8. From the limited configuration shell, it is possi CVE-2021-379166.1Joplin before 2.0.9 allows XSS via button and form in the note body.CVE-2021-379189.8Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.CVE-2021-379199.8Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.CVE-2021-37925.3Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead CVE-2021-379209.8Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.