The vulnerability is a buffer overflow (CWE-120) in the Scan Target field that can be triggered by providing an oversized 6000‑byte string. Local users can crash the application by clicking the Scan button, resulting in a denial of service that prevents legitimate scans from completing.

The flaw affects Infiltration‑Systems Infiltrator Network Security Scanner version 4.6. No other affected versions are currently documented.

The CVSS score of 6.8 indicates a moderate severity, and the EPSS score of less than 1% suggests a low probability of exploitation at this time. Because the attack requires local access to submit the oversized payload, the threat is limited to users with permission to run scans. The vulnerability is not listed in the CISA KEV catalog.