CVE-2020-37069
Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service
- State
- Published
- Severity
- 8.7 High
- Published
- Feb 3, 2026
- Updated
- Feb 4, 2026
- Reserved
- Feb 1, 2026
Description
Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected Products
| Product | Versions |
|---|---|
FTP UtilityKonica Minolta |
|
References
- ExploitDB-48502exploit
- Konica Minolta FTP Utility Download Pageproduct
- Konica Minolta Vendor Homepageproduct
- VulnCheck Advisory: Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Servicethird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.