Description
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NHI | card’s web service component | dae0509e5aabde2f110ce8418af67cf7 | — |