NetExec is a network execution tool that includes a spider_plus module to crawl and download files from SMB shares. Before version 1.5.1 the module creates the output file and folder path without normalizing path traversal characters such as ".." that can exist in Linux SMB share names. An attacker can craft a share name that contains these characters; when spider_plus crawls and downloads, it can create or overwrite arbitrary files on the host where it runs, allowing the modification of critical files or injection of code and thereby compromising confidentiality, integrity, or availability.

The vulnerability exists in all releases of NetExec before v1.5.1 by Pennyw0rth. Users running any earlier version and using the spider_plus module with the DOWNLOAD option enabled are affected.

The CVSS score of 5.3 indicates moderate severity. The EPSS score of less than 1 % suggests a low likelihood of exploitation in available data, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires an attacker to create an SMB share with a malicious name that includes path traversal characters and have the target system run spider_plus against that share with DOWNLOAD enabled. The impact is limited to the system on which spider_plus executes, as the flaw allows overwriting or creating arbitrary files there.