What’s Vulnerable › Vulnerabilities

CVE-2020-3925: ServiSign Windows Versions- Remote Code Execution via LoadLibrary

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-03 · updated 2026-06-17

Description

A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on target system via malicious crafted scripts.

Affected products

• CHANGING ServiSign Windows versions: through 1.0.19.0617

References

• https://tvn.twcert.org.tw/taiwanvn/TVN-201910005
• https://www.chtsecurity.com/news/1179d48b-7609-4f67-9d7e-3bac2979c6ce
• https://tvn.twcert.org.tw/taiwanvn/TVN-201910005
• https://www.chtsecurity.com/news/1179d48b-7609-4f67-9d7e-3bac2979c6ce

Get alerted when CVE-2020-3925 or the next vulnerability affects your stack