A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze…

1. 2017-03-15 First public exploit (Metasploit exploit/windows/http/dupscts_bof)
2. 2018-01-24 Published

78.66% chance of exploitation in the next 30 days, higher than 99.5% of all scored CVEs (FIRST EPSS, 2026-11-08).

• Metasploit exploit/windows/http/dup_scout_enterprise_login_bof Dup Scout Enterprise Login Buffer Overflow metasploit exploit, great rank, 2017-11-14
• Metasploit exploit/windows/http/disk_pulse_enterprise_get Disk Pulse Enterprise GET Buffer Overflow metasploit exploit, excellent rank, 2017-08-25
• Metasploit exploit/windows/http/dupscts_bof Dup Scout Enterprise GET Buffer Overflow metasploit exploit, great rank, 2017-03-15
• exploit-db.com https://www.exploit-db.com/exploits/42557 referenced PoC, tagged "exploit" by a source, unverified
• exploit-db.com https://www.exploit-db.com/exploits/42560/ referenced PoC, tagged "exploit" by a source, unverified
• exploit-db.com https://www.exploit-db.com/exploits/42559/ referenced PoC, tagged "exploit" by a source, unverified
• exploit-db.com https://www.exploit-db.com/exploits/42558/ referenced PoC, tagged "exploit" by a source, unverified

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

• exploit-db.com /exploits/42557

  exploit, third-party-advisory, vdb-entry

• exploit-db.com /exploits/42560/

  exploit, third-party-advisory, vdb-entry

• exploit-db.com /exploits/42559/

  exploit, third-party-advisory, vdb-entry

• exploit-db.com /exploits/42558/

  exploit, third-party-advisory, vdb-entry

• rapid7.com /db/modules/exploit/windows/http/disk_pulse_enterprise_get

  third-party-advisory

• CVE List CVE-2017-13696
• NVD CVE-2017-13696

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.