CVE-2018-25239 in Smart VPN
Summary
Smart VPN 1.1.3.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the search interface. Attackers can paste a buffer of 2100 characters into the top right search bar to trigger an unhandled exception that crashes the application.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Responsible
VulnCheck
Reservation
04/04/2026
Disclosure
04/04/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 355360 | SmartVPN Smart VPN Search externally-controlled input to select classes or code | 470 | Proof-of-Concept | Not defined | CVE-2018-25239 |