CVE-2019-25546 - NetAware 1.20 Share Name Denial of Service

Back Back to CVE browser

MEDIUM

NetAware 1.20 Share Name Denial of Service

Published Mar 21, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.19%

Description

NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local attackers to crash the application by supplying an excessively long string. Attackers can trigger a denial of service by pasting a 1000-byte buffer into the Share Name parameter when adding a new share through the Manage Shares interface.

Affected products

Vendor Infiltration-Systems Product NetAware Default
n/a
- Version
  1.20
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Infiltration-Systems

NetAware

n/a

Version	Status	Constraints
1.20	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19840
Advisory
https://www.exploit-db.com/exploits/46909
exploitVDB Entry
https://www.infiltration-systems.com
product
https://www.vulncheck.com/advisories/netaware-share-name-denial-of-service
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19840		Advisory
https://www.exploit-db.com/exploits/46909		exploitVDB Entry
https://www.infiltration-systems.com		product
https://www.vulncheck.com/advisories/netaware-share-name-denial-of-service		third-party-advisoryThird Party Advisory