Description
Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by
including the string "(editini)" in the file path, writing the new
password to the specified "Archive.ini" file. However, the application
does not verify that the provided path actually refers to an
"Archive.ini" file. If an attacker specifies a different file with
excessive size, a buffer overflow occurs. This vulnerability allows an
unauthenticated attacker to crash the server, resulting in denial of
service. This issue affects TeamDavid through Rollout 524.
Published: 2026-08-07
Score: 8.9 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Tobit Laboratories AG's TeamDavid Webbox application processes password changes through a function triggered by including the string "(editini)" in a file path. The function writes the new password to an Archive.ini file but does not verify that the provided path actually refers to an Archive.ini file. An attacker can supply a different file path with an excessively large value, causing a buffer overflow that crashes the server. This vulnerability permits an unauthenticated attacker to result in denial of service and is identified as CWE‑125: Out‑of‑Bounds Read.

Affected Systems

TeamDavid Webbox from Tobit Laboratories AG, versions through Rollout 524 are affected.

Risk and Exploitability

The CVSS score of 8.9 indicates high severity. EPSS is not available, and the vulnerability is not listed in CISA KEV, suggesting no widespread exploitation yet. The likely attack vector is remote unauthenticated path manipulation via the password change endpoint, which an attacker can use to trigger the overflow and disrupt service availability.

Generated by OpenCVE AI on August 7, 2026 at 11:24 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Obtain and apply the latest patch or upgrade to a TeamDavid version newer than Rollout 524 that addresses the buffer overflow.
  • Implement strict validation on the file path used for password changes so that only paths pointing to Archive.ini are accepted, and enforce bounds checking before writing to the file.
  • If a patch is not yet available, restrict unauthenticated access to the password change endpoint through network segmentation or firewall rules to block potential exploitation.

Generated by OpenCVE AI on August 7, 2026 at 11:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 07 Aug 2026 11:45:00 +0000

Type Values Removed Values Added
First Time appeared Tobit Laboratories Ag
Tobit Laboratories Ag teamdavid
Vendors & Products Tobit Laboratories Ag
Tobit Laboratories Ag teamdavid

Fri, 07 Aug 2026 10:15:00 +0000

Type Values Removed Values Added
Description Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by including the string "(editini)" in the file path, writing the new password to the specified "Archive.ini" file. However, the application does not verify that the provided path actually refers to an "Archive.ini" file. If an attacker specifies a different file with excessive size, a buffer overflow occurs. This vulnerability allows an unauthenticated attacker to crash the server, resulting in denial of service. This issue affects TeamDavid through Rollout 524.
Title TeamDavid: Buffer Overflow in 'editini' function
Weaknesses CWE-125
References
Metrics cvssV4_0

{'score': 8.9, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H'}

Subscriptions

Tobit Laboratories Ag Teamdavid
cve-icon MITRE

Status: PUBLISHED

Assigner: NCSC.ch

Published:

Updated: 2026-08-07T09:45:53.568Z

Reserved: 2026-06-12T09:32:46.514Z

Link: CVE-2026-54209

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-07T11:30:03Z

Weaknesses