CVE-2020-37142
HIGH10-Strike Network Inventory Explorer 8.54 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37142. PoCs published by Felipe Winsnes.
AI-analyzed exploit summary This exploit leverages a SEH-based buffer overflow in 10-Strike Network Inventory Explorer 8.54 by overwriting the SEH chain with a custom handler and executing shellcode to spawn calc.exe. The payload is generated using msfvenom and targets a non-ASLR DLL (sqlite3.dll).
Description
10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting SEH records. Attackers can craft a malicious payload targeting the 'Computer' parameter during the 'Add' function to trigger remote code execution.
Exploits (1)
This exploit leverages a SEH-based buffer overflow in 10-Strike Network Inventory Explorer 8.54 by overwriting the SEH chain with a custom handler and executing shellcode to spawn calc.exe. The payload is generated using msfvenom and targets a non-ASLR DLL (sqlite3.dll).
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H