A critical buffer overflow in 10-Strike Network Inventory Explorer Pro 9.31 allows unauthenticated attackers to achieve remote code execution through malicious text file imports.

The flaw exists within the text file import mechanism, where improper handling of input allows an attacker to inject a malicious payload. This triggers a buffer overflow that can be leveraged to establish a reverse shell, granting the attacker arbitrary code execution capabilities.

With a CVSS score of 9.8, this vulnerability allows for complete system takeover by an unauthenticated attacker. The potential impact includes the exfiltration of sensitive network inventory data, lateral movement within the network, and complete loss of system integrity.

Immediate Action: Update to the latest version of 10-Strike Network Inventory Explorer Pro to receive the necessary security patches.

Proactive Monitoring: Audit logs for suspicious file import activities and monitor for unusual outbound network connections indicative of a reverse shell.

Compensating Controls: Restrict the ability to import external files into the application and employ network segmentation to limit the reach of a potentially compromised host.

Public Exploit Available: Not specified

The ability to achieve remote code execution via file import makes this a critical security priority. Organizations using this version should apply the patch immediately and restrict the application's access to external data sources until the update is verified.