10-Strike Software vulnerabilities
Published CVEs affecting 10-Strike Software products: 4 record(s), with severity, exploitation and fixes.
CVE-2020-37142
High · 8.4
CWE-121 Feb 5, 2026
10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)
10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting SEH records. Attackers can craft a malicious payload targeting the 'Computer' parameter during the 'Add' function to trigger remote code execution.
CVE-2020-37138
Critical · 9.8
CWE-121 Feb 5, 2026
10-Strike Network Inventory Explorer: stack buffer overflow in file import (CVE-2020-37138)
10-Strike Network Inventory Explorer 9.03 contains a buffer overflow vulnerability in the file import functionality that allows remote attackers to execute arbitrary code. Attackers can craft a malicious text file with carefully constructed payload to trigger a stack-based buffer overflow and bypass data execution prevention through a ROP chain.
CVE-2020-37043
Critical · 9.8
CWE-120 Jan 30, 2026
10-Strike Bandwidth Monitor 3.9 - Buffer Overflow
10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling remote code execution and launching arbitrary system commands.
CVE-2020-36961
Critical · 9.8
CWE-121 Jan 28, 2026
10-Strike Network Inventory Explorer Buffer Overflow in Exception Handling (CVE-2020-36961)
10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code execution.