CVE-2020-37069: Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service
Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37069?
CVE-2020-37069 has a high severity rating due to its potential to crash the FTP server.
How does CVE-2020-37069 exploit the vulnerability?
CVE-2020-37069 allows attackers to exploit a buffer overflow in the NLST command by sending an oversized buffer of 1500 'A' characters.
What systems are affected by CVE-2020-37069?
CVE-2020-37069 affects version 1.0 of the Konica Minolta FTP Utility.
How can I mitigate CVE-2020-37069?
Mitigation for CVE-2020-37069 involves restricting the use of the NLST command or implementing rate limiting on the FTP server.
Is there a patch available for CVE-2020-37069?
As of now, there is no official patch released for CVE-2020-37069, and users should consider upgrading or finding workarounds.