NHI Health Insurance Web Service Component
Approved changes feed: RSS · Atom
cpe:2.3:a:nhi:health_insurance_web_service_component:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Nhi (3e9f3b86-8e17-5584-ac2e-35ca2e852baa) |
|---|---|
| Product | Health Insurance Web Service Component (f9e30400-4f43-56e0-81a0-17fc7cc0e34e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-35219 |
vulnerable | 2026-06-08 05:46:04.276767 |
NHI card’s web service component - Stack-based Buffer Overflow-2
MEDIUM (5.5)
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
Published: 2022-08-02T15:20:19.164Z
Updated: 2024-09-16T23:51:28.770Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35218 |
vulnerable | 2026-06-08 05:46:04.276425 |
NHI card’s web service component - Heap-based Buffer Overflow
MEDIUM (5.5)
The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
Published: 2022-08-02T15:20:04.675Z
Updated: 2024-09-16T19:15:40.514Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35217 |
vulnerable | 2026-06-08 05:46:04.275975 |
NHI card’s web service component - Stack-based Buffer Overflow-1
HIGH (7.8)
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
Published: 2022-08-02T02:55:28.143Z
Updated: 2024-09-16T20:53:13.282Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45918 |
vulnerable | 2026-06-08 05:36:49.565463 |
NHI’s health insurance web service component – Heap-based Buffer Overflow
HIGH (7.5)
NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authentication, which requires a system restart to recover service.
Published: 2022-06-20T05:30:26.758Z
Updated: 2024-09-17T04:04:01.665Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.