CVE-2020-37208

MediumCVSS 5.5/10Last modified Jun 29, 2026

Description

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2026
Last modified
Jun 29, 2026
NVD status
Analyzed

Related CVEs from 2020

CVE-2020-372095.5SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the applicatiCVE-2020-37218.8Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary codeCVE-2020-372105.5SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. AttackCVE-2020-372115.5SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the regiCVE-2020-372125.5SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the applicationCVE-2020-372137.5TextCrawler Pro 3.1.1 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized buffCVE-2020-372147.5Voyager 1.3.0 contains a directory traversal vulnerability that allows attackers to access sensitive system files by manipulating the asset CVE-2020-372157.5MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying anCVE-2020-372167.5Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where imprCVE-2020-372174.3Easy2Pilot 7 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized user accounts by tricking authentCVE-2020-372188.2Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbCVE-2020-372197.5Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manip
CVE-2020-37208: Medium severity, CVSS 5.5 | Vulnix