Approved changes feed: RSS · Atom

cpe:2.3:a:panorama_project:nhiservisignadapter:1.0.20.0218:*:*:*:*:windows:*:*

part: a version: 1.0.20.0218 update: *

VendorPanorama Project (85c7f3c4-14f1-5987-8f03-c8c6ce77f2a5)
ProductNhiservisignadapter (80c488c0-f584-58d6-9e7e-e09f477ad5f1)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25846 vulnerable 2026-06-08 05:23:49.542443 CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -2
HIGH (7.5)
The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.
Published: 2020-12-31T07:45:48.074Z
Updated: 2024-09-17T01:41:45.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25845 vulnerable 2026-06-08 05:23:49.541782 CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -1
HIGH (7.5)
Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.
Published: 2020-12-31T07:45:47.467Z
Updated: 2024-09-16T18:08:11.534Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.