CVE-2020-37133

6.7 mediumEPSS 0.5%

Medium (6.7) in uvnc ultravnc. EPSS 0.5% chance of exploitation in the next 30 days.

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash the application. Attackers can paste an overly long string of 300 characters into the Repeater Host property to trigger an application crash.

Severity

CVSS 4.0

6.7 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-121
Published: 2026-02-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

uvnc:ultravnc

References

https://www.exploit-db.com/exploits/48288
https://www.uvnc.com/
https://www.vulncheck.com/advisories/ultravnc-launcher-repeaterhost-denial-of-service

Check your stack JSON