CVE-2019-25597CWE-787

CVE-2019-25597

Medium · published March 22, 2026

CVSS v3.1
6.2
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a large payload into the Community field and trigger the Walk function to cause a denial of service condition.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-03-22T18:16Z
Affected products (1)
ProductVersionsFixed in
nsasoft/nsauditor≥ 3.1.2.0, < 3.2.73.2.7
References (3)
http://www.nsauditor.com/downloads/nsauditor_setup.exe · [email protected]https://www.exploit-db.com/exploits/46757 · [email protected]https://www.vulncheck.com/advisories/nsauditor-denial-of-service-via-community-field · [email protected]
EPSS history
Timeline
  • 22 MAR 13:38Z
    NSauditor 3.1.2.0 Denial of Service via Community Field
    cvelistv5