CVE-2020-36995
Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service
- State
- Published
- Severity
- 4.6 Medium
- Published
- Jan 29, 2026
- Updated
- May 12, 2026
- Reserved
- Jan 27, 2026
Description
Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal functionality.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.6 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected Products
| Product | Versions |
|---|---|
Mocha Telnet Lite for iOStelnet-lite |
|
References
- ExploitDB-48728exploit
- Official App Store Page for Mocha Telnet Liteproduct
- VulnCheck Advisory: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Servicethird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.