{"id":"CVE-2020-37069","aliases":["EUVD-2020-31009","GHSA-2rv9-m7pg-rvf8"],"status":"published","title":"Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service","description":"Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00684,"percentile":0.52827,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2026-02-03T22:01:39Z","modified":"2026-06-17T03:16:53Z","products":[{"vendor":"konica minolta","product":"ftp utility"},{"vendor":"konicaminolta","product":"ftp_utility"}],"references":[{"url":"https://www.exploit-db.com/exploits/48502","tags":["exploit","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://konica-minolta-ftp-utility.software.informer.com/download/","tags":["product","Permissions Required"]},{"url":"https://www.konicaminolta.us/","tags":["product","Product"]},{"url":"https://www.vulncheck.com/advisories/konica-minolta-ftp-utility-nlst-denial-of-service","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-37069"},{"url":"https://konica-minolta-ftp-utility.software.informer.com/download"},{"url":"https://www.konicaminolta.us"},{"url":"https://github.com/advisories/GHSA-2rv9-m7pg-rvf8"}],"sources":{"cve":[{"id":"CVE-2020-37069","title":"Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service","description":"Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.","status":"published","published":"2026-02-03T22:01:39.136Z","modified":"2026-02-04T19:10:07.417Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:35:47.22408Z"}],"euvd":[{"id":"EUVD-2020-31009","description":"Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.","status":"published","published":"2026-02-03T22:01:39Z","modified":"2026-02-04T19:10:07Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T19:48:44.193176Z"}],"ghsa":[{"id":"GHSA-2rv9-m7pg-rvf8","title":"Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that...","description":"Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.","status":"published","published":"2026-02-04T00:30:28Z","modified":"2026-02-04T00:30:35Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:06:01.962776Z"}],"nvd":[{"id":"CVE-2020-37069","description":"Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.","status":"published","published":"2026-02-03T22:16:21.97Z","modified":"2026-06-17T03:16:53.703Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:06:48.591569Z"}]}}