CVE-2020-37069

Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service

High8.7Public exploitEPSS 0.68%

Published: 3 Feb 2026
Updated: 4 Feb 2026
Reserved: 1 Feb 2026
Assigned by: VulnCheck

Description

Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.

Public exploit

A reference of the record is tagged as an exploit or proof of concept: anyone can try it against an unpatched system. CISA's SSVC rates its exploitation: a proof of concept is public.

ExploitDB-48502 (opens in a new tab)exploit

Timeline

2026
1 Feb 2026
1 Feb 2026
ID reserved
By VulnCheck
3 Feb 20262 days later
3 Feb 2026· 2 days later
Published
4 Feb 20261 day later
4 Feb 2026· 1 day later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2020-37069, by who scored it
Scored by	CVSS	Score	Vector
VulnCheckCNA (assigner)	4.0	High8.7	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
VulnCheckCNA (assigner)	3.1	Critical9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Analyzed	4.0	High8.7	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (exploitation in 30 days): 0.68% · top 47% of all CVEs (7 Nov 2026)
CISA SSVC: Exploitation: poc · Automatable: yes · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.7.

Weakness

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (opens in a new tab)All about CWE-120 and its CVEs

Affected products

Konica Minolta · FTP Utility
- affected 1.0

References (4)

ExploitDB-48502 (opens in a new tab)exploit
Konica Minolta FTP Utility Download Page (opens in a new tab)product
Konica Minolta Vendor Homepage (opens in a new tab)product
VulnCheck Advisory: Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service (opens in a new tab)third-party-advisory

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2020-37069](https://trackcve.app/badge/CVE-2020-37069.svg)](https://trackcve.app/cve/CVE-2020-37069)

Record last updated 4 Feb 2026, 19:10 UTC.