What’s Vulnerable › Vulnerabilities

CVE-2018-25228: NetSetMan 4.7.1 Workgroup Buffer Overflow Denial of Service

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-03-30 · updated 2026-10-07
• Weakness: CWE-787

Description

NetSetMan 4.7.1 contains a buffer overflow vulnerability in the Workgroup feature that allows local attackers to crash the application by supplying oversized input. Attackers can create a malicious configuration file with excessive data and paste it into the Workgroup field to trigger a denial of service condition.

Affected products

• NetSetMan: 4.7.1

References

• https://www.exploit-db.com/exploits/46417
• https://www.netsetman.com/
• https://www.netsetman.com/netsetman.exe
• https://www.vulncheck.com/advisories/netsetman-workgroup-buffer-overflow-denial-of-service

Get alerted when CVE-2018-25228 or the next vulnerability affects your stack