PT-2026-29019 · Southrivertech · Webdrive

Published 2026-03-30 · Updated 2026-04-08 · CVE-2018-25233

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions WebDrive version 18.00.5057

Description WebDrive 18.00.5057 contains a denial of service issue that allows local attackers to crash the application. This occurs by providing an excessively long string in the username field during Secure WebDAV connection setup. Attackers can input a buffer overflow payload of 5000 bytes in the username parameter and trigger a connection test to cause the application to crash.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, limit the length of the username input field during Secure WebDAV connection setup.

Exploit

Fix

DoS

Weakness Enumeration

CWE-233

Related Identifiers

CVE-2018-25233

Affected Products

Webdrive

References · 6

• 🔥 https://exploit-db.com/exploits/45761 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-25233 · Security Note
• https://vulncheck.com/advisories/webdrive-denial-of-service-via-secure-webdav · Note
• https://webdrive.com/download · Note
• https://t.me/cveNotify/158473 · Telegram Post
• https://webdrive.com · Note