CVE-2020-37204
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.
Risk Assessment
The risk is that an attacker can remotely or locally crash the RemShutdown application, leading to service disruption and potential loss of remote shutdown management functionality.
Recommendation
It is recommended to immediately update RemShutdown to the latest version that includes a fix for this vulnerability. If an update is not available, restrict application access to trusted users and monitor for unusual input.
Other vulnerabilities in RemShutdown
Original NVD description (English source)
RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.