CVE-2021-47772 - CVE House
Back to Database
Status published High CVE-2021-47772

10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH)

Vulnerability Description

10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the target system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-47772

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • ro0k

References

More from 10-Strike

View All →
CVE-2021-47767
10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path
High 8.5
CVE-2020-37021
Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path
High 8.5
CVE-2018-25345
10-Strike Network Scanner 3.0 Local Buffer Overflow SEH
High 8.6
CVE-2018-25344
10-Strike Network Inventory Explorer 8.54 Buffer Overflow SEH
High 8.6
CVE-2018-25255
10-Strike LANState 8.8 Local Buffer Overflow SEH
High 8.6

Affected Vendor

Affected Software

Strike Network Inventory Explorer Pro
Vulnerable Versions:
9.31

Timeline

Official Publish: January 15th, 2026
Last Modified: January 15th, 2026
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-787

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control
T1485 Data Destruction
Impact