The vulnerability is a buffer overflow that allows an attacker to crash the WebDrive 18.00.5057 application by supplying a 5000‑byte username string during the Secure WebDAV connection setup. The flaw can be triggered by executing a simple connection test and results in the application terminating unexpectedly, thereby denying legitimate users access to the drive until the service is restarted.

The flaw affects WebDrive version 18.00.5057 produced by WebDrive (South River Technology). Any deployment of this specific build that uses Secure WebDAV is vulnerable. No other versions are mentioned as affected.

The CVSS score of 6.9 indicates medium severity. Because the exploit requires the attacker to be present on the machine that runs WebDrive, the risk is limited to local. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting it is not widely exploited yet. An attacker could achieve a denial of service by crafting a long username string and initiating a Secure WebDAV connection, causing the application to crash and potentially disrupting business operations.