CVE-2020-37205
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.
Risk Assessment
The risk is that an attacker can crash the application locally or remotely, causing service disruption and potential loss of access to RemShutdown functionality.
Recommendation
It is recommended to immediately update to the latest version of RemShutdown that fixes this vulnerability and restrict application access to trusted users only.
Other vulnerabilities in RemShutdown
Original NVD description (English source)
RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.