Nsasoft ShareAlarmPro Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Nsasoft ShareAlarmPro Advanced Network Access Control. This issue allows attackers to crash the application by entering an oversized registration key. By generating a buffer payload of 1000 characters and pasting it into the registration key field, the application can be forced to crash.

Impact

Exploitation of this vulnerability leads to a crash of the ShareAlarmPro application.

Reproduction

To reproduce this vulnerability, download and install ShareAlarmPro. After installation, create a file named 'poc.txt' that contains a 1000-character buffer payload. Open the ShareAlarmPro application and navigate to the registration section. Copy the payload from 'poc.txt' and paste it into the registration key field. Click 'Ok' to submit. The application will crash upon receipt of the oversized input.