CVE-2020-37199
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
Risk Assessment
The risk is that an attacker can remotely or locally crash the NBMonitor application, leading to disruption of network monitoring and potential data loss.
Recommendation
It is recommended to immediately update NBMonitor to the latest version that fixes this vulnerability and restrict application access to trusted users only.
Other vulnerabilities in NBMonitor
Original NVD description (English source)
NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.