CVE-2020-37138CWE-121

10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)

High · published February 5, 2026

CVSS v4.0
8.4
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

⚡ A carefully crafted text file is all it takes to unleash chaos! The buffer overflow in 10-Strike Network Inventory Explorer 9.03 lets attackers execute arbitrary code remotely, turning your network inventory into a playground for cyber mischief. 🔥 Think of it like a restaurant chef who receives an order with some secret instructions hidden in the ingredients list. If they don't check carefully, they might whip up a dish that wasn't intended, potentially causing a culinary catastrophe! In this case, an attacker could trigger a stack-based buffer overflow, giving them the power to execute their malicious code and potentially take control of your system. This could lead to unauthorized data access, manipulation, or even complete system compromise — a recipe for disaster!

Put simply

Think of it like a restaurant chef who receives an order with some secret instructions hidden in the ingredients list. If they don't check carefully, they might whip up a dish that wasn't intended, potentially causing a culinary catastrophe! The vulnerability lies in the file import functionality, where a remote attacker can exploit a buffer overflow by sending a malicious text file. The exploit bypasses data execution prevention using a return-oriented programming (ROP) chain, allowing for arbitrary code execution.

What to do

In this case, an attacker could trigger a stack-based buffer overflow, giving them the power to execute their malicious code and potentially take control of your system. This could lead to unauthorized data access, manipulation, or even complete system compromise — a recipe for disaster! Update to the latest version of 10-Strike Network Inventory Explorer as soon as possible to close this vulnerability. In addition, implement strict input validation to ensure that only safe files can be imported. Regularly audit your systems to catch any potential vulnerabilities early! This is fixable! By following these steps, you can bolster your defenses and keep your network safe. You've got this! 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00709 · 53.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-02-05T16:13Z
EPSS history
Timeline
  • 05 FEB 16:13Z
    10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)
    cvelistv5