Impact
The vulnerability in RoboImport 1.2.0.72 allows a local attacker to cause a denial of service by submitting oversized data to the registration fields. By pasting a 6000‑byte buffer into both the Registration Name and Registration Key fields and clicking Register, the application crashes. The weakness is a classic buffer overflow (CWE‑120) that corrupts critical data structures and results in an uncontrolled shutdown of the software, potentially disrupting services that rely on RoboImport. The impact is limited to the local machine or environment where the application is running, but any processes or systems depending on RoboImport may become unavailable until the application is restarted or a patch is applied.
Affected Systems
Affected systems include Picajet RoboImport version 1.2.0.72. No additional affected versions were specified in the CNA data.
Risk and Exploitability
The CVSS score of 6.8 gives the vulnerability a moderate severity rating. The EPSS score of < 1% indicates a very low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is local, requiring physical or remote access to the host machine where the application runs. An attacker would need to launch a user‑initiated registration action inside the application with the oversized payload. While the risk of exploitation is low, any intrusion that can reach a local session can leverage this flaw to destabilize the application.
OpenCVE Enrichment