Executive brief
10-Strike Network Scanner, a tool used by IT administrators to discover and manage devices on a local network, contains a security flaw in how it handles host names. An attacker can provide a specially crafted, overly long host name or IP address that causes the application to crash and run malicious code. If exploited, this could allow an attacker to take full control of the computer running the scanner, potentially leading to data theft or further network compromise.
Technical details
A classic buffer overflow (CWE-120) exists in 10-Strike Network Scanner 3.0 within the 'Host name or address' input field. The vulnerability is triggered when the application processes a malicious payload through the 'Trace route' or 'System information' functions. By providing a specifically crafted string, an attacker can overflow the stack buffer, overwrite Structured Exception Handler (SEH) records, and bypass SafeSEH protections to redirect execution flow. This allows for arbitrary code execution on the local system with the privileges of the user running the application. While the attack is local, it requires no special privileges or user interaction beyond the standard operation of the software on the malicious input.
Affected products
- 10-Strike Network Scanner 3.0 and earlier
Timeline
- 2018-06-02: other: Initial vendor contact by researcher
- 2018-06-05: disclosed: Proof of concept exploit published on Exploit-DB
- 2026-05-23: advisory: CVE published/updated via VulnCheck