CVE-2017-14980

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

22.31% chance of exploitation in the next 30 days, 98th percentile

Published

2017-10-09

Updated

2024-08-05

Proof-of-concept exploits (10)

• http://packetstormsecurity.com/files/144452/Sync-Breeze-Enterprise-10.0.28-Buffer-Overflo…
• LipeOzyy/CVE-2017-14980_syncbreeze_10.0.28_bof2★ · 2025-08-18
• TheDarthMole/CVE-2017-149800★ · 2023-02-03
• kareemBambo/Boof2★ · 2023-06-28
• xn0kkx/Exploit_Sync_Breeze_v10.0.28_CVE-2017-149800★ · 2025-02-08
• 0xkr3pt0n/CVE-2017-149800★ · 2026-05-09
• DaviGSantana/CVE-2017-149800★ · 2026-01-20
• TheMalwareGuardian/CVE-2017-149801★ · 2026-03-23
• ahmedmamdouh6/CVE-2017-149800★ · 2026-05-10
• damariion/CVE-2017-14980.RCE0★ · 2026-03-02

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/syncbreeze_bof.rb

References

• CVE Record
• NVD entry

Related

• CVE-2010-1872
• CVE-2022-0944
• CVE-2026-31431
• CVE-2023-50965
• CVE-2002-1120
• CVE-2003-0264