vendor:
NetworkSleuth
by:
Ismail Tasdelen
7.5
CVSS
HIGH
Denial of Service
20
CWE
Product Name: NetworkSleuth
Affected Version From: 3.0.0.0
Affected Version To: 3.0.0.0
Patch Exists: NO
Related CWE: N/A
CPE: a:nsauditor:networksleuth
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows 10
2020
NetworkSleuth 3.0.0.0 – ‘Key’ Denial of Service (PoC)
A denial of service vulnerability exists in NetworkSleuth 3.0.0.0 due to improper validation of user-supplied input. An attacker can exploit this vulnerability by creating a malicious file (poc.txt) containing 1000 characters and then copying and pasting the characters in the field 'Key' and clicking on 'Ok', which will cause the application to crash.
Mitigation:
Ensure that user-supplied input is properly validated before being used.