CVE-2018-25256

6.8 mediumEPSS 0.2%

Medium (6.8) in ks-soft ip-tools. EPSS 0.2% chance of exploitation in the next 30 days.

IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data into the 'From Addr' and 'To Addr' fields and trigger the crash by clicking the Start button, causing denial of service and SEH overwrite.

Severity

CVSS 4.0

6.8 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2026-04-05
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19

Affected

ks-soft:ip-tools

References

https://www.exploit-db.com/exploits/46286
https://www.ks-soft.net/ip-tools.eng/index.htm
https://www.vulncheck.com/advisories/ip-tools-local-buffer-overflow-denial-of-service

Check your stack JSON