Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2020-37202

NetworkSleuth 3.0.0.0 - 'Key' Denial of Service

Description

NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nsasoft Nsauditor NetworkSleuth

  • 3.0.0.0affected

References