Vulnerabilities (CVE)

Filtered by vendor Nhi Subscribe

Filtered by product Health Insurance Web Service Component

Total 4 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2022-35219	2 Microsoft, Nhi	2 Windows, Health Insurance Web Service Component	2024-11-21	N/A	5.5 MEDIUM
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
CVE-2022-35218	2 Microsoft, Nhi	2 Windows, Health Insurance Web Service Component	2024-11-21	N/A	5.5 MEDIUM
The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
CVE-2022-35217	2 Microsoft, Nhi	2 Windows, Health Insurance Web Service Component	2024-11-21	N/A	7.8 HIGH
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
CVE-2021-45918	1 Nhi	1 Health Insurance Web Service Component	2024-11-21	7.8 HIGH	7.5 HIGH
NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authentication, which requires a system restart to recover service.