Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c478-8rj5-w9cv

Опубликовано: 21 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.4
CVSS3: 7.8

Описание

Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arbitrary code by bypassing data execution prevention. Attackers can inject a malicious payload through the Username field in User Management to trigger a stack-based buffer overflow and execute commands via ROP chain gadgets.

Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arbitrary code by bypassing data execution prevention. Attackers can inject a malicious payload through the Username field in User Management to trigger a stack-based buffer overflow and execute commands via ROP chain gadgets.

EPSS

Процентиль: 7%
0.00022
Низкий

8.4 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 7.8
nvd
4 месяца назад

Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arbitrary code by bypassing data execution prevention. Attackers can inject a malicious payload through the Username field in User Management to trigger a stack-based buffer overflow and execute commands via ROP chain gadgets.

EPSS

Процентиль: 7%
0.00022
Низкий

8.4 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-121