CVE-2020-37208

HighCVSS 7.5

Published: 11/02/2026(UTC)Updated: 29/06/2026(UTC)Translated: 30/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

38th percentile - higher than 38% of all known CVEs

Summary

A buffer overflow vulnerability was found in SpotFTP 3.0.0.0 in the registration key input field. An attacker can inject a 1000-character payload, causing the application to crash and resulting in denial of service.

Risk Assessment

The risk involves the ability to crash the application locally or remotely, leading to service disruption and potential data unavailability.

Recommendation

It is recommended to immediately update to the latest version of SpotFTP or apply a patch that fixes the vulnerability. If no update is available, restrict access to the application and monitor logs for unusual input.

Other vulnerabilities in SpotFTP

CVE-2020-37209High
A denial of service vulnerability exists in SpotFTP 3.0.0.0 in the registration name input field. An attacker can paste a 1000-character buffer payload into the 'Name' field, causing the application to crash.

Original NVD description (English source)

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service.