cvedb.io
CVE-2021-37909
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2021-09-15T19:15:09.873 · Last modified 2026-06-17T04:01:13.930

Summary

WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus perform hijack attacks to execute arbitrary code.

Affected products

tssservisignadapter_project — tssservisignadapter

Does this affect you?

Add your gear to cvedb and we'll alert you only when tssservisignadapter_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.