A stack‑based buffer overflow exists in the registration key input dialog of 10‑Strike Network Inventory Explorer, allowing a local attacker to overwrite the Structured Exception Handler by entering a crafted string of 4188 bytes followed by shellcode. This flaw, classified as CWE‑121, enables execution of arbitrary code with the privileges of the running application and can be triggered by simply pasting the malicious key into the registration dialog.

The vulnerability affects 10‑Strike Network Inventory Explorer version 8.54. No other affected versions are cited in the description.

The issue carries a CVSS score of 8.6. Exploitation requires local access, with no publicly available exploit code and an unavailable EPSS score. The vulnerability is not listed in CISA’s KEV catalog. An attacker with local privileges can trigger the overflow by launching the application and entering a malicious registration key, gaining code execution at the level granted to the application.