PT-2026-44541 · Lakeside · Systrack Agent
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Lakeside SysTrack Agent versions prior to 11.2.1.28
Lakeside SysTrack Agent versions prior to 11.3.0.38
Lakeside SysTrack Agent versions prior to 11.4.0.24
Lakeside SysTrack Agent versions prior to 11.5.0.15
Description
An out-of-bounds read exists in the Command ID 30 UDP packet handler. Remote attackers can cause a denial of service by sending a specially crafted UDP packet containing a malformed payload with an invalid memory address at offset 0x4, which triggers an access violation and crashes the application.
Recommendations
Update to version 11.2.1.28 or later.
Update to version 11.3.0.38 or later.
Update to version 11.4.0.24 or later.
Update to version 11.5.0.15 or later.
Fix
DoS
Out of bounds Read
Improper Check for Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Systrack Agent