CVE-2020-37209

HighCVSS 7.5

Published: 11/02/2026(UTC)Updated: 29/06/2026(UTC)Translated: 30/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

26th percentile - higher than 26% of all known CVEs

Summary

A denial of service vulnerability exists in SpotFTP 3.0.0.0 in the registration name input field. An attacker can paste a 1000-character buffer payload into the 'Name' field, causing the application to crash.

Risk Assessment

The risk is that an attacker can intentionally crash the application, disrupting FTP service and potentially causing data access loss.

Recommendation

It is recommended to immediately update to the latest version of SpotFTP that fixes this vulnerability and to limit input length in the registration name field.

Other vulnerabilities in SpotFTP

CVE-2020-37208High
A buffer overflow vulnerability was found in SpotFTP 3.0.0.0 in the registration key input field. An attacker can inject a 1000-character payload, causing the application to crash and resulting in denial of service.

Original NVD description (English source)

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.