CVE-2020-37069

Summary

Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.

Affected Software

Weaknesses

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://www.exploit-db.com/exploits/48502
• https://konica-minolta-ftp-utility.software.informer.com/download/
• https://www.konicaminolta.us/
• https://www.vulncheck.com/advisories/konica-minolta-ftp-utility-nlst-denial-of-service

• ←Previous
• Next→