10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)
Vulnerability Description
10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting SEH records. Attackers can craft a malicious payload targeting the 'Computer' parameter during the 'Add' function to trigger remote code execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-37142
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Felipe Winsnes
References
- https://www.exploit-db.com/exploits/48253
- https://www.10-strike.com/
- https://web.archive.org/web/20210105222137/https://whitecr0wz.github.io/posts/Strike-Network-Inventory-Explorer-Structered-Exception-Handling-Overwrite/
- https://www.vulncheck.com/advisories/strike-network-inventory-explorer-add-local-buffer-overflow-seh
More from 10-Strike Software
View All →Affected Vendor
10-Strike Software
View all reports →