CVE-2020-37069

Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service

Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.

Affected

Konica Minolta · FTP Utility

CVSS v4.0 VULNCHECK

8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 VULNCHECK

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.67% chance of exploitation in the next 30 days, 51st percentile

Published

2026-02-03

Updated

2026-02-04

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/48502

Security advisories

• https://www.vulncheck.com/advisories/konica-minolta-ftp-utility-nlst-denial-of-service
• https://www.konicaminolta.us

References

• CVE Record
• NVD entry