Vendor
CGServiSign by Changing contains an OS command injection vulnerability allowing unauthenticated remote attackers to execute arbitrary code on a victim's host.