CVE-2021-47772
CriticalSummary
10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the target system.
Risk Assessment
The vulnerability could allow an attacker to fully compromise the target system.
Recommendation
Update the software to the latest version and avoid importing text files from untrusted sources.
Original NVD description (English source)
10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the target system.