CVE-2017-13696

CVE-2017-13696 is a critical buffer overflow vulnerability affecting the web server components of Flexense products including Dup Scout Enterprise, Disk Savvy Enterprise, Sync Breeze Enterprise, and Disk Pulse Enterprise. An unauthenticated attacker can exploit this by crafting a malicious GET request, leading to complete system compromise with NT AUTHORITY / SYSTEM privileges. With a CVSS score of 9.8 (CRITICAL) and a FAUCET Risk Score of 99/100, this vulnerability presents a severe risk due to its network-based attack vector and low attack complexity. While not listed in CISA KEV, multiple Metasploit modules exist for exploitation, and community discussion is high, indicating significant interest and potential for active exploitation.