CVE-2018-25345

10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attackers to bypass SafeSEH protections and execute arbitrary code. Attackers can craft a malicious payload in the host name or address field and trigger the vulnerability through the Trace route or System information functions to achieve code execution.

Score

CVSS 4.0 8.6 High

Status

Deferred - disclosure@vulncheck.com

Published

2026-05-23

Last modified

2026-05-26

Weaknesses

CWE-120

Affected products

• Network Scanner (10-strike)

References

• https://www.10-strike.com/
• https://www.exploit-db.com/exploits/44841
• https://www.vulncheck.com/advisories/10-strike-network-scanner-local-buffer-overflow-seh