What’s Vulnerable › Vulnerabilities

CVE-2020-37069: Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-03 · updated 2026-06-17
• Weakness: CWE-120

Description

Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.

Affected products

• Konica Minolta FTP Utility: 1.0

References

• https://konica-minolta-ftp-utility.software.informer.com/download/
• https://www.exploit-db.com/exploits/48502
• https://www.konicaminolta.us/
• https://www.vulncheck.com/advisories/konica-minolta-ftp-utility-nlst-denial-of-service

Get alerted when CVE-2020-37069 or the next vulnerability affects your stack