Description
ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nsasoft | Nsauditor ShareAlarmPro Advanced Network Access Control | - | — |
References
- ExploitDB-47859 exploit
- Vendor Homepage product
- VulnCheck Advisory: ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service third-party-advisory