Vulnerabilities > CVE-2022-28381 - Out-of-bounds Write vulnerability in Allmediaserver 1.6

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
allmediaserver
CWE-787
critical

Summary

Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932.

Vulnerable Configurations

Part Description Count
Application
Allmediaserver
1

Common Weakness Enumeration (CWE)