CVE-2017-8893

High

Published: 02/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet. This can cause a buffer overflow and denial of service.

Risk Assessment

Buffer overflow may allow attackers to execute remote code or cause service crashes, impacting system availability.

Recommendation

It is recommended to update AeroAdmin to the latest version to mitigate this vulnerability and to monitor the system for unauthorized access attempts.

Other vulnerabilities in AeroAdmin 4.1

CVE-2017-8894High
AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in-the-middle in order to execute code on the machine.

Original NVD description (English source)

AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet. This can cause a buffer overflow and denial of service.