This vulnerability in Disig Web Signer versions 2.0.3 through 2.5.3 enables remote code execution without requiring privileges or authentication. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, availability, and security requirements. The vendor has not published a patch or official remediation guidance as of the published date.

Successful exploitation could allow an attacker to execute arbitrary code remotely on affected systems, potentially leading to full compromise of the impacted host. The high CVSS score reflects severe impact on confidentiality, integrity, and availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected versions of Disig Web Signer and monitoring for suspicious activity related to this product. Avoid deploying affected versions in exposed environments.