PT-2018-18189 · Softros · Softros Network Time System

Hyp3Rlinx + 1 · Published 2018-03-26 · Updated 2018-04-24 · CVE-2018-7658

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Softros Network Time System version 2.3.4

Description The issue allows remote attackers to cause a denial of service by sending exactly 11 bytes to NTSServerSvc.exe in the server, resulting in a daemon crash.

Recommendations For Softros Network Time System version 2.3.4, consider restricting access to the NTSServerSvc.exe service until a patch is available to prevent potential denial of service attacks.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-7658

Affected Products

Softros Network Time System

References · 4

• 🔥 https://exploit-db.com/exploits/44255 · Exploit
• 🔥 http://packetstormsecurity.com/files/146645/Softros-Network-Time-System-Server-2.3.4-Denial-Of-Service.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-7658 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7658 · Security Note