10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to execute arbitrary code …

CVE-2020-37142 affects 10-Strike Network Inventory Explorer version 8.54, containing a structured exception handler (SEH) buffer overflow vulnerability. Attackers can exploit this flaw by crafting malicious payloads targeting the 'Computer' parameter during the 'Add' function. The vulnerability allows arbitrary code execution through overwriting SEH records. Remote code execution is possible when the crafted payload is processed. This represents a critical security flaw in network inventory management software that could allow complete system compromise.