PatchTheCVEnhiservisignadapter vulnerabilities and fixes
Recent CVEs affecting nhiservisignadapter, with upgrade or downgrade steps. 5 tracked.
nhiservisignadapter has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-12-31. Highest priority: CVE-2020-25844 (score 53/100).
- CVE-2020-25846 HIGH 7.5 DOWNGRADE The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads
- CVE-2020-25845 HIGH 7.5 DOWNGRADE Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB reques
- CVE-2020-25844 HIGH 8.1 DOWNGRADE The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which lead
- CVE-2020-25843 HIGH 8.1 DOWNGRADE NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflo
- CVE-2020-25842 HIGH 7.5 DOWNGRADE The encryption function of NHIServiSignAdapter fail to verify the file path input by users
FAQ
How do I fix nhiservisignadapter vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nhiservisignadapter being exploited right now?
None of the tracked nhiservisignadapter CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nhiservisignadapter CVE should I patch first?
CVE-2020-25844 currently ranks highest (53/100): The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which lead.