VULNERABILITY INTELLIGENCE

CVE-2018-25256

CVSS score6.8 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-04-05
Last modified2026-07-24
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Description

IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data into the 'From Addr' and 'To Addr' fields and trigger the crash by clicking the Start button, causing denial of service and SEH overwrite.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references