CVE-2020-36995CWE-120

Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service

Medium · published January 29, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
34.5
In the wild
Unconfirmed
What it is

⚠️ A crafty input can crash the Mocha Telnet Lite app! By hammering the 'User' field with 350 bytes of junk, attackers can bring the whole thing to its knees. 😱 Think of it like a restaurant where a customer overloads the order slip with 350 identical requests — the kitchen just can't keep up, leading to chaos and a temporary shutdown. 🍽️ This denial of service vulnerability means that attackers can effectively halt application functions, leaving users frustrated as they struggle to connect. If exploited, it disrupts normal operations, making the app unusable until resolved. Quite the inconvenience!

Put simply

Think of it like a restaurant where a customer overloads the order slip with 350 identical requests — the kitchen just can't keep up, leading to chaos and a temporary shutdown. 🍽️ CVE-2020-36995 is a denial of service vulnerability in Mocha Telnet Lite for iOS where by manipulating the user configuration input, an attacker can crash the application by overwriting the 'User' field with excessive repetitive characters.

What to do

This denial of service vulnerability means that attackers can effectively halt application functions, leaving users frustrated as they struggle to connect. If exploited, it disrupts normal operations, making the app unusable until resolved. Quite the inconvenience! To protect against this, ensure that you update the app to the latest version where this issue has been addressed. Additionally, consider implementing input validation to restrict the length and type of characters users can enter. Regularly review user input handling to prevent similar vulnerabilities in the future. This is fixable! Stay proactive and you'll have your app running smoothly again in no time. 🛡️

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00413 · 34.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-29T14:28Z
EPSS history
Timeline
  • 29 JAN 14:28Z
    Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service
    cvelistv5