Description
Cyberoam Authentication Client 2.1.2.7 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) memory. Attackers can craft a malicious input in the 'Cyberoam Server Address' field to trigger a bind TCP shell on port 1337 with system-level access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cyberoam | Cyberoam Authentication Client | 2.1.2.7 | — |
References
- ExploitDB-48148 exploit
- Archived Cyberoam Authentication Client Software product
- VulnCheck Advisory: Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH) third-party-advisory