Description
Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll) can return a NULL pointer (i.e., when no user is logged into the Triofox Server Agent Management Console). The returned NULL pointer is not checked before being dereferenced.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Gladinet | Triofox | < 17.3.10565.57509 | 17.3.10565.57509 |
Advisories 1
- WID-SEC-2026-1698 Gladinet Triofox: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 27, 2026