Vulnerability · Published Jul 15, 2025 · Assigned by VulnCheck
CVE-2025-34105DiskBoss Enterprise Stack-Based Buffer Overflow RCE
Critical 10.0
In plain English
A critical-severity improper input validation in DiskBoss Enterprise from Flexense. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.
Official description
A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14. The vulnerability arises from improper bounds checking on the path component of HTTP GET requests. By sending a specially crafted long URI, a remote unauthenticated attacker can trigger a buffer overflow, potentially leading to arbitrary code execution with SYSTEM privileges on vulnerable Windows hosts.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Flexense | DiskBoss Enterprise | 7.4.287.5.128.2.14 |
Weakness: CWE-20, CWE-787 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
References
- https://www.exploit-db.com/exploits/40869 exploit
- https://www.exploit-db.com/exploits/42395 exploit
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/diskboss_get_bof.rb exploit
- https://www.vulncheck.com/advisories/diskboss-enterprise-buffer-overflow-rce third-party-advisory