CVE-2017-13696

A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component. Successful exploitation of the software will allow an attacker to gain complete access to the system with NT AUTHORITY / SYSTEM level privileges. The vulnerability lies due to improper handling and sanitization of the incoming request.

• CWE-119

• https://www.exploit-db.com/exploits/42557Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42558/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42559/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42560/Exploit, Third Party Advisory, VDB Entry
• https://www.rapid7.com/db/modules/exploit/windows/http/disk_pulse_enterprise_getThird Party Advisory
• https://www.exploit-db.com/exploits/42557Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42558/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42559/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42560/Exploit, Third Party Advisory, VDB Entry
• https://www.rapid7.com/db/modules/exploit/windows/http/disk_pulse_enterprise_getThird Party Advisory

Published

Jan 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1369IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scrip…
• CVE-2017-13690The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-r…
• CVE-2017-13692In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allow…
• CVE-2017-13693The acpi_ds_create_operands() function in drivers/acpi/acpic…
• CVE-2017-13694The acpi_ps_complete_final_op() function in drivers/acpi/acp…
• CVE-2017-13695The acpi_ns_evaluate() function in drivers/acpi/acpica/nseva…
• CVE-2017-13697controllers/member/api.php in dayrui FineCms 5.0.11 has XSS …
• CVE-2017-13698An issue was discovered on MOXA EDS-G512E 5.1 build 16072215…
• CVE-2017-13699An issue was discovered on MOXA EDS-G512E 5.1 build 16072215…
• CVE-2017-1370IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose …
• CVE-2017-13700An issue was discovered on MOXA EDS-G512E 5.1 build 16072215…
• CVE-2017-13701An issue was discovered on MOXA EDS-G512E 5.1 build 16072215…