Network Inventory Explorer
CVE-2021-47772
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the target system.
AnalysisAI
10-Strike Network Inventory Explorer Pro 9.31 has a buffer overflow in text file import that enables RCE through crafted files. PoC available.
Technical ContextAI
The text file import lacks bounds checking (CWE-787), enabling code execution through malicious import files.
RemediationAI
Avoid importing files from untrusted sources.
More in Network Inventory Explorer
View all10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function. Ra
10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key i
10-Strike Network Inventory Explorer Pro 9.31 contains an unquoted service path vulnerability in the srvInventoryWebServ
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today