Vendors / NHI Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now NHI records in CISA KEV No NHI vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01537 · Published 2022-06-20 · No fix listed CWE-122
Priority LOW 34
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2022-08-02 · No fix listed CWE-787
Priority LOW 24
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00187 · Published 2022-08-02 · No fix listed CWE-787
Priority LOW 24
The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00187 · Published 2022-08-02 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
0 2 2 0 0
THREATIST.IORead the docs