high7.8Public exploit code
CVE-2017-15950
Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SyncBreeze 10.1.16 - XML Parsing Stack-based Buffer Overflow2021-03-29 · webapps · windows
Impact
Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flexense | Syncbreeze | Version 10.1.16 |