Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2020-37185

Backup Key Recovery 2.2.5 - 'Name' Denial of Service

Description

Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nsasoft Nsauditor Backup Key Recovery

  • 2.2.5affected

References