CVE-2022-46306

CVE-2022-46306 is a path traversal vulnerability in the ChangingTec ServiSign component, stemming from insufficient filtering of special characters in DLL file paths. This flaw allows an unauthenticated remote attacker to trick a user into accessing a malicious website, leading to the loading of arbitrary malicious DLLs and enabling arbitrary system operations, including disruption of service. With a CVSS score of 7.8 (High), the vulnerability has a low attack complexity and requires user interaction, but can result in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.