Approved changes feed: RSS · Atom

cpe:2.3:a:panorama:nhiservisignadapter:1.0.20.0218:*:*:*:*:windows:*:*

part: a version: 1.0.20.0218 update: *

VendorPanorama (0a358eba-b34d-5877-9b4a-41c7bf4addee)
ProductNhiservisignadapter (2756f2e4-525f-549b-9bdc-c65403af1a1f)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25844 vulnerable 2026-06-08 05:23:49.539455 CHANGING Inc. NHIServiSignAdapter Windows Versions - Stack Overflow
HIGH (8.1)
The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.
Published: 2020-12-31T07:45:46.812Z
Updated: 2024-09-16T16:53:50.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25843 vulnerable 2026-06-08 05:23:49.538886 CHANGING Inc. NHIServiSignAdapter Windows Versions - Heap Overflow
HIGH (8.1)
NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to execute code without privilege.
Published: 2020-12-31T07:45:46.167Z
Updated: 2024-09-16T18:28:28.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25842 vulnerable 2026-06-08 05:23:49.538108 CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access
HIGH (7.5)
The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.
Published: 2020-12-31T07:45:45.548Z
Updated: 2024-09-16T19:25:28.103Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.