CVE-2020-37201
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
Risk Assessment
The risk involves the ability to crash the application locally or remotely, potentially leading to data loss or network disruption. The attack does not require authentication, increasing its accessibility to potential attackers.
Recommendation
It is recommended to immediately update NetShareWatcher to the latest version that fixes this vulnerability. If an update is not available, restrict access to the application to trusted users and monitor for unusual input.
Other vulnerabilities in NetShareWatcher
See all- CVE-2019-25733High
NetShareWatcher 1.5.8.0 has a structured exception handler buffer overflow vulnerability allowing local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to trigger code execution when the Find function is invoked.
- CVE-2020-37200High
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the application by supplying oversized input. Attackers can generate a 1000-character payload and paste it into the registration key field to trigger an application crash.
Original NVD description (English source)
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.