CVE-2018-25287

Received Received - Intake

Buffer Overflow in Drive Power Manager 1.10 Causes DoS

Publication date: 2026-04-26

Last updated on: 2026-04-26

Assigner: VulnCheck

Description

Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-26

Last Modified

2026-04-26

Generated

2026-07-06

AI Q&A

2026-04-27

EPSS Evaluated

2026-07-05

NVD

CVE-2018-25287

EUVD

EUVD-2018-21807

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

Drive Power Manager version 1.10 has a buffer overflow vulnerability. This occurs when a local attacker inputs an excessively long string into the Name field of the application.

Specifically, an attacker can paste a payload of 6000 bytes into the Name field and then click Register, which causes the application to crash.

This vulnerability allows the attacker to trigger a denial of service condition by exploiting the buffer overflow.

Impact Analysis

This vulnerability can impact you by causing the Drive Power Manager application to crash, resulting in a denial of service.

Since the vulnerability requires local access and user interaction, an attacker with local access can disrupt the normal operation of the application by supplying a specially crafted input.

The impact is limited to availability, as the vulnerability does not affect confidentiality or integrity.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2018-25287. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70