LabF nfsAxe 3.7 Ping Client contains a buffer overflow in the Host IP field that allows a local user to supply a malicious payload and overwrite the return address, leading to arbitrary code execution. The flaw is a classic stack‑based buffer overflow, classified as CWE‑120, and can be exploited to run commands such as calc.exe or any shellcode injected by the attacker.

The vulnerability affects the LabF nfsAxe product, specifically version 3.7, as supplied by the vendor LabF. No other versions or variants are listed as affected, so only installations of LabF nfsAxe 3.7 are at risk.

The vulnerability carries a CVSS score of 8.6, indicating high severity. There is no EPSS score available, but the flaw is local, requiring an attacker to have access to the machine running the client. Because the attack vector is local and the exploit directly overwrites the return address, it can be leveraged to execute arbitrary code with the privileges of the nfsAxe process. The flaw is not listed in CISA KEV, but its impact is significant for any organization that deploys LabF nfsAxe 3.7 and allows local users to use the ping client.