A denial of service vulnerability in the Managed Switch Port Mapping Tool 2.85.2 allows unauthenticated attackers to crash the application via buffer overflow techniques.

The application fails to implement proper bounds checking on the IP Address and SNMP Community Name fields. An unauthenticated attacker can input a 10,000-character buffer to trigger a resource exhaustion condition, resulting in an application crash.

The ability to remotely or locally crash this management tool results in a loss of network visibility and administrative control over switch ports. Given the CVSS score of 7.5, this high-severity flaw can cause significant operational disruption by forcing administrators to manually restart the service, potentially delaying critical network troubleshooting or security response activities.

Immediate Action: As no official patch is currently available from the vendor, users should restrict access to the application interface to trusted administrative networks only.

Proactive Monitoring: Monitor system logs for repeated application crashes or unusual process termination events that may indicate exploitation attempts.

Compensating Controls: Implement strict network segmentation to ensure that the management interface is not exposed to untrusted users, as the application lacks robust input validation for configuration parameters.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the Exploit-DB entry 49566.

The vulnerability represents a significant risk to network availability and monitoring capabilities. Because there is currently no vendor-supplied patch, organizations must prioritize network-level access controls to prevent unauthorized interaction with the vulnerable fields. Users are advised to monitor the official vendor website for future updates and to treat this instance as a high-priority configuration security concern.