PT-2025-51297 · Nvclient · Nvclient

Published 2025-12-15 · Updated 2025-12-21 · CVE-2023-53879

Positive Technologies (AI Summary)

CVSS v4.0

6.7

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NVClient version 5.0

Description NVClient 5.0 contains a stack buffer overflow in the user configuration contact field. An attacker can overwrite 846 bytes of memory by pasting a crafted payload into the contact box, leading to a denial of service condition. The vulnerability allows attackers to crash the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2023-53879

Affected Products

Nvclient

References · 8

• 🔥 https://exploit-db.com/exploits/51700 · Exploit
• 🔥 http://download.eyemaxdvr.com/DVST%20ST%20SERIES/CMS/Video%20Surveillance%20Management%20Software(V5.0).pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53879 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53879 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2000750906128683152 · Twitter Post
• https://twitter.com/CVEnew/status/2002857356930245007 · Twitter Post
• https://t.me/cveNotify/146266 · Telegram Post
• https://vulncheck.com/advisories/nvclient-stack-buffer-overflow-vulnerability-via-user-configuration · Note