CVE-2018-25235

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Out-of-bounds Write pada networkactiv web server. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

NetworkActiv Web Server 4.0 contains a buffer overflow vulnerability in the username field of the Security options that allows local attackers to crash the application by supplying an excessively long string. Attackers can trigger a denial of service by entering a crafted username value exceeding the expected buffer size through the Set username interface.

Rincian

Terbit di NVD

30 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/networkactiv-web-server-username-field-buffer-overflow-dos advisory pihak ketiga
• https://www.exploit-db.com/exploits/45302 exploit · vdb entry
• https://www.networkactiv.com/Dev/ product
• https://www.networkactiv.com/WebServer.html product