vendor:
NBMonitor
by:
Ismail Tasdelen
7.5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: NBMonitor
Affected Version From: 1.6.6.0
Affected Version To: 1.6.6.0
Patch Exists: NO
Related CWE: N/A
CPE: a:nsauditor:nbmonitor:1.6.6.0
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows 10
2020
NBMonitor 1.6.6.0 – ‘Key’ Denial of Service (PoC)
NBMonitor is vulnerable to a denial of service attack when a malicious user sends a large amount of data to the 'Key' field. This causes the application to crash.
Mitigation:
Ensure that input validation is performed on all user-supplied data to prevent malicious data from being processed.