PatchSiren

PatchSiren cyber security CVE debrief

CVE-2020-37209 Nsasoft CVE debrief

CVE-2020-37209 is a denial of service vulnerability in SpotFTP 3.0.0.0. The vulnerability exists in the registration name input field, allowing attackers to crash the application by generating a 1000-character buffer payload and pasting it into the 'Name' field. This vulnerability has a CVSS score of 4.6 and a severity of MEDIUM. The CVE was published on 2026-02-11T21:16:16.293Z and last modified on 2026-06-29T18:33:21.583Z.

Vendor
Nsasoft
Product
Nsauditor SpotFTP FTP Password Recovery
CVSS
MEDIUM 4.6
CISA KEV
Not listed in stored evidence
Original CVE published
2026-02-11
Original CVE updated
2026-06-29
Advisory published
2026-02-11
Advisory updated
2026-06-29

Who should care

Administrators and users of SpotFTP 3.0.0.0 should be aware of this vulnerability and take necessary steps to defend against it. This vulnerability can be exploited by attackers to crash the application, potentially disrupting service. The vulnerability has a MEDIUM severity and a CVSS score of 4.6.

Technical summary

CVE-2020-37209 is a denial of service vulnerability in SpotFTP 3.0.0.0. The vulnerability exists in the registration name input field, allowing attackers to crash the application by generating a 1000-character buffer payload and pasting it into the 'Name' field. The CVSS vector for this vulnerability is CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. The weakness associated with this vulnerability is CWE-120.

Defensive priority

This vulnerability has a MEDIUM severity and a CVSS score of 4.6. Administrators and users of SpotFTP 3.0.0.0 should prioritize defending against this vulnerability to prevent potential disruptions to service.

Recommended defensive actions

  • Update SpotFTP to a version that is not vulnerable
  • Implement input validation and sanitization for the registration name input field
  • Monitor for and block suspicious traffic to the application
  • Consider implementing a web application firewall to detect and prevent attacks
  • Keep software and systems up to date with the latest security patches

Evidence notes

The CVE-2020-37209 vulnerability was published on 2026-02-11T21:16:16.293Z and last modified on 2026-06-29T18:33:21.583Z. The vulnerability has a CVSS score of 4.6 and a severity of MEDIUM. The weakness associated with this vulnerability is CWE-120.

Sources and references

Verified primary and authoritative sources

  • CVE-2020-37209 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2020-37209

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2020-37209 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2020-37209

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.