CVE-2008-1402
MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1) denial of service (exception and crash) via a UDP packet to the SNMP Trap Service (MgWTrap3.exe) or (2) denial of service (device freeze or memory…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.58%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1) denial of service (exception and crash) via a UDP packet to the SNMP Trap Service (MgWTrap3.exe) or (2) denial of service (device freeze or memory consumption) via a malformed request to the Net Inspector Server (niengine).
- CVSS 2.0
- 7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
- EPSS
- 2.58% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- mg-soft/net inspector
- Source
- cve@mitre.org
References
- http://aluigi.altervista.org/adv/netinsp-adv.txtExploit
- http://secunia.com/advisories/29421Vendor Advisory
- http://www.securityfocus.com/archive/1/489704/100/0/threaded
- http://www.securityfocus.com/bid/28266
- https://www.exploit-db.com/exploits/5269
- http://aluigi.altervista.org/adv/netinsp-adv.txtExploit
- http://secunia.com/advisories/29421Vendor Advisory
- http://www.securityfocus.com/archive/1/489704/100/0/threaded
- http://www.securityfocus.com/bid/28266
- https://www.exploit-db.com/exploits/5269
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.