CVE Intelligence
Analysis AI-assisted

CVE-2020-37069: Konica Minolta FTP Utility: NLST Command Buffer Overflow

CVE-2020-37069 is a classic buffer overflow (CWE-120) in the NLST command of Konica Minolta FTP Utility version 1.0, as described in the VulnCheck-provided record. The CNA scores it CVSS 3.1 9.8 (Critical), and the record says it may allow denial of service and potentially unauthorized code execution. No KEV listing or confirmed exploitation appears in the sources consulted, and the record contains no fixed version.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2020-37069 is a classic buffer overflow (CWE-120) affecting the NLST command of Konica Minolta FTP Utility version 1.0, according to the record. The description states that the flaw can overwrite system registers and crash the FTP server, and that it may potentially allow execution of unauthorized code.

Impact

  • The CNA assessed CVSS 3.1 as 9.8 (Critical), with network attack vector, no privileges required, no user interaction, and high confidentiality, integrity and availability impact.
  • The same provider also lists a CVSS 4.0 score of 8.7.
  • The description mentions denial of service (server crash) and possible unauthorized code execution.

Affected products and versions

  • Konica Minolta FTP Utility, version 1.0, is the only version listed in the record.
  • Whether other versions are affected is unknown from the sources consulted.

Exploitation status

  • The record shows the CVE is not listed in the CISA KEV catalog, so no active exploitation is confirmed by that source.
  • No confirmed exploitation appears in the sources consulted.
  • The references include an Exploit-DB entry; its existence is noted here, but its content was not analyzed.

Remediation and mitigation

  • The record contains no fixed version and no vendor patch reference. This absence does not mean no fix exists; verify with the vendor.
  • Consider replacing or decommissioning this utility with a maintained FTP solution if no vendor update is available.
  • Restrict network exposure of FTP services, allow access only from trusted networks, and apply network segmentation.

Detection guidance

  • Monitor the FTP service for unexpected crashes or restarts.
  • Review logs for abnormal or malformed NLST requests at a high level, and track connections from untrusted sources.

Limitations of the available information

  • The record has no vendor advisory or fixed version, and the EPSS and SSVC fields are empty.
  • The affected version list contains only version 1.0.
  • Vendor support status for this product is unknown.

Frequently asked questions

Is CVE-2020-37069 known to be actively exploited?

The record shows it is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted.

Which versions are affected?

The record lists only Konica Minolta FTP Utility version 1.0. Whether other versions are affected is unknown.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.