A buffer overflow flaw in the password field of P10 Central Management Software version 1.4.13 lets an attacker supply a long input string, such as 2000 bytes, and cause the application to crash when the login button is pressed. The crash results in an application‑level denial of service but does not leak or alter data. The vulnerability is limited to local execution on a system where the user can interact with the login interface and does not provide elevation or remote code execution. The referenced weakness is CWE‑120, a classic stack-based buffer overflow.

The affected product is P10: Central Management Software, specifically version 1.4.13. No other versions are reported as vulnerable in the current data.

The CVSS score of 6.8 marks the flaw as a moderate risk. The EPSS < 1% indicates a very low probability that an exploit is or will be used in the wild. The vulnerability is not listed in the CISA KEV catalog, further suggesting limited exploitation. Attackers must have local access to the system and a means to interact with the software’s login screen to trigger the crash. There are no known public exploits that leverage this flaw remotely or require elevated privileges. The risk is principally to service availability for local machines hosting the application.