high7.8
CVE-2022-35217
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length.
Impact
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nhi | Health Insurance Web Service Component | All versions |