Device Monitoring Studio version 8.10.00.8925 is vulnerable to a denial of service condition triggered by a local attacker who supplies an excessively long string as a server name or address in the Connect to New Server dialog. The malformed input causes the application to crash, resulting in an interruption of service. The vulnerability is an instance of improper handling of user supplied data that leads to resource exhaustion and is classified as CWE-1316.

The affected product is Device Monitoring Studio 8.10.00.8925 from the vendor HDD. No other affected versions are listed in the available data.

The CVSS score of 6.9 denotes a moderate severity. Because the exploit requires local access to the application and is not tracked in the CISA KEV catalog, immediate exploitation is unlikely but the impact on availability can be significant for users relying on the application. The attacker must have local privilege to access the Tools menu; no remote vectors are documented. The overall risk remains moderate given the local nature of the attack and the lack of public exploitation evidence.