Buffer Overflow Vulnerability in Infiltrator Network Security Scanner by Infiltration Systems
CVE-2018-25280

6.8MEDIUM

Key Information:

Vendor: Infiltration-systems
Status: Infiltrator Network Security Scanner
Vendor: CVE Published:; 26 April 2026

🔔 Create Infiltration-systems Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2018-25280?

The Infiltrator Network Security Scanner 4.6 is susceptible to a buffer overflow vulnerability that can be exploited by local attackers. By inputting an oversized string—up to 6000 bytes—into the Scan Target field, attackers can induce a denial of service condition, leading the application to crash when the Scan button is activated. This flaw could allow malicious users to disrupt the service's availability, thereby impacting operations relying on the scanner for network security assessments.

Affected Version(s)

Infiltrator Network Security Scanner 4.6

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2018-25280 - Proof of Concept