CVE-2017-15950

High

Published: 31/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the 'Destination directory' field, either within an XML document or through use of passive mode.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system and execution of malicious code, posing a serious security threat to the organization.

Recommendation

It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor the system for unauthorized activities.

Other vulnerabilities in Flexense SyncBreeze Enterprise 10.1.16

CVE-2017-17099High
There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under the Windows SYSTEM account.

Original NVD description (English source)

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS