Vulnerability · Published Jul 15, 2025 · Assigned by VulnCheck
CVE-2025-34108Disk Pulse Enterprise 9.0.34 Login Stack Buffer Overflow
High 8.6
In plain English
A high-severity stack buffer overflow in Disk Pulse Enterprise from Flexense. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.
Official description
A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34. An attacker can send a specially crafted HTTP POST request to the /login endpoint with an overly long username parameter, causing a buffer overflow in the libspp.dll component. Successful exploitation allows arbitrary code execution with SYSTEM privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Flexense | Disk Pulse Enterprise | 9.0.34 |
Weakness: CWE-121, CWE-20 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/disk_pulse_enterprise_bof.rb exploit
- https://www.exploit-db.com/exploits/40452 exploit
- https://vulners.com/metasploit/MSF:EXPLOIT-WINDOWS-HTTP-DISK_PULSE_ENTERPRISE_BOF- exploit
- https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0006.html/ third-party-advisory
- https://www.vulncheck.com/advisories/disk-pulse-enterprise-login-stack-buffer-overflow