CVE-2017-14980 is a critical buffer overflow vulnerability affecting Sync Breeze Enterprise version 10.0.28. This flaw allows unauthenticated remote attackers to achieve full compromise (confidentiality, integrity, availability) by submitting an excessively long username parameter to the /login endpoint. While not actively exploited in the wild, a public Metasploit module exists, indicating readily available exploit code. Despite its high severity and exploit availability, there is minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
10.0.28CPE matchmatch criteria | cpe:2.3:a:flexense:syncbreeze:10.0.28:*:*:*:enterprise:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.