Vulnerability · Published Feb 3, 2026 · Assigned by VulnCheck
CVE-2020-37068Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service
Critical 9.8
In plain English
A critical-severity buffer overflow in FTP Utility from Konica Minolta. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.7%top 47.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the LIST command that allows attackers to overwrite system registers. Attackers can send an oversized buffer of 1500 'A' characters to crash the FTP server and potentially execute unauthorized code.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Konica Minolta | FTP Utility | 1.0 |
Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-48501 exploit
- Konica Minolta FTP Utility Download Page product
- Konica Minolta Vendor Homepage product
- VulnCheck Advisory: Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service third-party-advisory