10-Strike Network Inventory Explorer 8.54 Registration registration key stack-based overflow

Summaryinfo

A vulnerability marked as critical has been reported in 10-Strike Network Inventory Explorer 8.54. This issue affects some unknown processing of the component Registration Handler. The manipulation of the argument registration key leads to stack-based overflow. This vulnerability is traded as CVE-2018-25344. An attack has to be approached locally. Furthermore, there is an exploit available.

Detailsinfo

A vulnerability was found in 10-Strike Network Inventory Explorer 8.54 and classified as critical. This issue affects an unknown code of the component Registration Handler. The manipulation of the argument registration key with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is confidentiality, integrity, and availability. The summary by CVE is:

10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field that allows local attackers to execute arbitrary code by triggering a structured exception handler overwrite. Attackers can craft a malicious registration key string with 4188 bytes of padding followed by SEH chain values and shellcode, then paste it into the registration dialog to achieve code execution with application privileges.

The weakness was shared by Hashim Jawad as 44840. The advisory is shared at exploit-db.com. The identification of this vulnerability is CVE-2018-25344 since 05/23/2026. The exploitation is known to be easy. An attack has to be approached locally. Technical details as well as a public exploit are known.

The exploit is available at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Exploit-DB (44840) and EUVD (EUVD-2018-21868). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• 10-Strike

Name

• Network Inventory Explorer

Version

• 8.54

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion