Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2020-37107

Core FTP LE 2.2 - Denial of Service

Description

Core FTP LE 2.2 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the account field with a large buffer. Attackers can create a text file with 20,000 repeated characters and paste it into the account field to cause the application to become unresponsive and require reinstallation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Core FTP Core FTP LE

  • 2.2 build 1947affected

References