CVE-2022-39060: Changingtec Megaservisignadapter

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability to access and modify HKEY_CURRENT_USER subkey (ex: AutoRUN) in Registry where malicious scripts can be executed to take control of the system or to terminate the service.

Affected products

• Changingtec Megaservisignadapter: before 1.0.22.1004 (fixed in 1.0.22.1004)

Published 2023-01-31. Last modified 2026-06-17.