ObserverIP Scan Tool version 1.4.0.1 is vulnerable to a denial‑of‑service condition that can be triggered by submitting an excessively long string to the IP input field. By entering a 2000‑byte payload of repeated characters and initiating a search, a local attacker can cause the application to crash. The flaw is a classic out‑of‑bounds buffer overflow as identified by CWE‑789, resulting in loss of availability for any process depending on the tool.

The affected product is ObserverIP Scan Tool 1.4.0.1 from vendor P10. No other versions are listed in the CNA data; remediation applies to this exact build.

The CVSS score of 6.9 indicates moderate severity, but the EPSS score of less than 1 % and the absence from the CISA KEV catalog imply a low likelihood of exploitation in the wild. The vulnerability can only be exercised by an attacker with local access to the machine running the tool. Exploitation requires no special privileges; merely delivering the oversized input suffices to crash the application and deny service to users who rely on it.