CVE-2020-37068

Katalog CVE

CVSS 9.8 · Critical EPSS 0,67%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada konicaminolta ftp utility. Skor CVSS 3.1 9.8 (Critical) menurut vulncheck.com.

Deskripsi (NVD)

Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the LIST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.

Rincian

Terbit di NVD

3 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,67% peluang dieksploitasi; lebih tinggi dari 50,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/48501 exploit · advisory pihak ketiga · vdb entry
• https://www.vulncheck.com/advisories/konica-minolta-ftp-utility-list-denial-of-service advisory pihak ketiga
• https://konica-minolta-ftp-utility.software.informer.com/download/ permissions required
• https://www.konicaminolta.us/ product