CVE-2020-37069

Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - disclosure@vulncheck.com

Published

2026-02-03

Last modified

2026-02-04

Weaknesses

CWE-120

Affected products

• Ftp Utility (Konica Minolta)
• Ftp Utility (Konicaminolta)

References

• https://konica-minolta-ftp-utility.software.informer.com/download/
• https://www.exploit-db.com/exploits/48502
• https://www.konicaminolta.us/
• https://www.vulncheck.com/advisories/konica-minolta-ftp-utility-nlst-denial-of-service