Impact
IP TOOLS version 2.50 contains a local buffer overflow flaw in the SNMP Scanner component. The vulnerability is triggered when an attacker supplies overly long strings to the 'From Addr' and 'To Addr' fields. The overflow corrupts the stack and overwrites the SEH record, causing the application to crash and producing a denial of service. The weakness is classified as Buffer Overflow (CWE-787).
Affected Systems
The flaw affects the IP TOOLS product from Ks‑Soft, specifically version 2.50. No other versions or editions are listed as vulnerable by the vendor.
Risk and Exploitability
The CVSS score is 6.8, indicating moderate severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector is local: an attacker must have the ability to run the application and enter data into its user interface. The exploit does not grant code execution, but it can be used to crash the utility, potentially serving as a foothold for further local privilege escalation if the SEH overwrite can be controlled.
OpenCVE Enrichment