Sign In
Advisories

Flexsense DiskBoss 'Add Input Directory' Buffer Overflow

Go Back
severity
high
date
Affecting

  • 7.7.14

CVE type
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CVSS
8.6
CVSS V4 Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Credit
Paras Bhatia
Description
Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field.