CVE-2021-47815CWE-120

Nsauditor 3.2.3 - Denial of Service (PoC)

Medium · published January 15, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

⚠️ Just a single input can bring the application crashing down! Attackers can exploit a vulnerability in Nsauditor 3.2.3 by pasting 256 characters into the registration code field. 🔥 Think of it like a restaurant where a customer orders too many appetizers at once, overwhelming the kitchen staff until they can’t keep up with the orders. This vulnerability is like a chef losing control, resulting in a chaotic kitchen! An attacker can crash the Nsauditor application, rendering it unusable for everyone. While it won't compromise sensitive data, it certainly disrupts operations and can frustrate users trying to work. Imagine your team left hanging while the application is down!

Put simply

Think of it like a restaurant where a customer orders too many appetizers at once, overwhelming the kitchen staff until they can’t keep up with the orders. This vulnerability is like a chef losing control, resulting in a chaotic kitchen! This vulnerability arises from insufficient handling of input in the registration code field, allowing for a denial of service when an excessively large buffer is entered. Pasting in 256 repeated characters causes the application to choke and crash.

What to do

An attacker can crash the Nsauditor application, rendering it unusable for everyone. While it won't compromise sensitive data, it certainly disrupts operations and can frustrate users trying to work. Imagine your team left hanging while the application is down! To remediate this issue, update Nsauditor to version 3.2.4, where this bug has been fixed. Additionally, implement input validation to limit the size of user inputs and avoid similar mishaps in the future. You've got this! By taking these steps, you're on your way to keeping your applications running smoothly and your users happy! 🛡️

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00477 · 40.2th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-15T23:25Z
EPSS history
Timeline
  • 15 JAN 23:25Z
    Nsauditor 3.2.3 - Denial of Service (PoC)
    cvelistv5