Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-36881. PoCs published by Paras Bhatia.
AI-analyzed exploit summary This exploit demonstrates a local buffer overflow in DiskBoss 7.7.14 by overwriting the EIP with a JMP EBX instruction and executing shellcode to launch calc.exe. It requires DEP to be disabled for the target process.
Description
Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field.
Exploits (1)
This exploit demonstrates a local buffer overflow in DiskBoss 7.7.14 by overwriting the EIP with a JMP EBX instruction and executing shellcode to launch calc.exe. It requires DEP to be disabled for the target process.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H