CVE-2020-37069

8.7 highEPSS 0.7%

High (8.7) in konicaminolta ftp utility. EPSS 0.7% chance of exploitation in the next 30 days.

Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2026-02-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

konicaminolta:ftp_utility

References

https://konica-minolta-ftp-utility.software.informer.com/download/
https://www.exploit-db.com/exploits/48502
https://www.konicaminolta.us/
https://www.vulncheck.com/advisories/konica-minolta-ftp-utility-nlst-denial-of-service

Check your stack JSON