CVE-2018-25228CWE-787

CVE-2018-25228

Medium · published March 30, 2026

CVSS v3.1
6.2
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

NetSetMan 4.7.1 contains a buffer overflow vulnerability in the Workgroup feature that allows local attackers to crash the application by supplying oversized input. Attackers can create a malicious configuration file with excessive data and paste it into the Workgroup field to trigger a denial of service condition.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00221 · 11.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-03-30T16:16Z
Affected products (1)
ProductVersionsFixed in
netsetman/netsetmanall versions—
References (4)
https://www.exploit-db.com/exploits/46417 · [email protected]https://www.netsetman.com/ · [email protected]https://www.netsetman.com/netsetman.exe · [email protected]https://www.vulncheck.com/advisories/netsetman-workgroup-buffer-overflow-denial-of-service · [email protected]
EPSS history
Timeline
  • 30 MAR 11:02Z
    NetSetMan 4.7.1 Workgroup Buffer Overflow Denial of Service
    cvelistv5