CVE-2020-25844

The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.
References
Link Resource
https://www.twcert.org.tw/tw/cp-132-4272-23ba4-1.html Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:panorama:nhiservisignadapter:1.0.20.0218:*:*:*:*:windows:*:*

Information

Published : 2020-12-31 00:15

Updated : 2021-02-03 05:36


NVD link : CVE-2020-25844

Mitre link : CVE-2020-25844


JSON object : View

CWE
CWE-787

Out-of-bounds Write

Advertisement

dedicated server usa

Products Affected

panorama

  • nhiservisignadapter