CVE Intelligence
Analysis AI-assisted

CVE-2020-37120: Rubo DICOM Viewer 2.0 Buffer Overflow in DICOM Server Name Field

CVE-2020-37120 is a buffer overflow in the DICOM server name input field of Rubo DICOM Viewer 2.0, as described in the record. The description states that it can overwrite the Structured Exception Handler and may lead to remote code execution. The record gives a CVSS 3.1 score of 9.8 (critical), no KEV listing, and no structured list of affected or fixed versions.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

The record describes CVE-2020-37120 in Rubo DICOM Viewer 2.0, a buffer overflow in the DICOM server name input field. According to the description, the flaw can be used to overwrite the Structured Exception Handler and lead to remote code execution. The assigned weakness is CWE-121, Stack-based Buffer Overflow.

Impact

  • According to the description, an attacker could execute arbitrary code by overwriting the Structured Exception Handler.
  • The CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H indicates a network attack vector, low complexity, no privileges required and no user interaction, with high impact on confidentiality, integrity and availability. The base score is 9.8.
  • VulnCheck also provides a CVSS 4.0 score of 8.4.

Affected products and versions

  • Product named in the description: Rubo DICOM Viewer 2.0.
  • The record contains no structured list of affected or fixed versions. The affected version range and fix status are unknown from the available data.

Exploitation status

The record shows that this CVE is not listed in the CISA KEV catalog. No confirmed exploitation appears in the sources consulted. The record references an Exploit-DB entry, but this analysis does not describe its contents.

Remediation and mitigation

  • The record does not identify a vendor fix. Check the vendor archived page and confirm current support status with the vendor.
  • Where the product is still in use, restrict network access to the DICOM service to trusted systems and authorized clients.
  • Treat files of unknown origin opened in the viewer with caution and open only files from trusted sources.
  • If no vendor update is available, consider replacing the software with a supported alternative.

Detection guidance

  • Monitor for unexpected crashes or restarts of the viewer or its DICOM service, which can indicate attempted memory corruption.
  • Log and review inbound connections to the DICOM service from unexpected networks.
  • Review endpoint telemetry for unexpected child processes started by the viewer.

Limitations of the available information

The record does not provide affected version ranges, fixed versions, vendor patch details or a detailed technical root cause. The NVD source status is listed as Deferred in the record. EPSS and SSVC data are absent. The vendor reference is an archived page, so its current accuracy is unverified.

Frequently asked questions

Is CVE-2020-37120 known to be actively exploited?

The record shows it is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted. The record does reference an Exploit-DB entry.

Is there a fixed version of Rubo DICOM Viewer 2.0?

The record does not list any fixed version or vendor patch. The fix status is unknown, so check with the vendor and consider restricting exposure or replacing the software.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.