CVE-2020-37068CWE-120

Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service

High · published February 3, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

⚡ A single oversized buffer of 1500 'A' characters can turn your Konica Minolta FTP Utility into a crashing mess! 🚨 Think of the LIST command as a waiter taking an order at a busy restaurant; if a customer shouts a ridiculously long order, the waiter can get overwhelmed and drop all the plates! In this case, that oversized buffer can cause the FTP server to crash and open the door for unauthorized code execution. An attacker exploiting this vulnerability could not only crash your FTP server but could potentially gain unauthorized access to execute commands, leading to a complete system takeover. This is a serious threat that could disrupt operations and compromise sensitive data!

Put simply

Think of the LIST command as a waiter taking an order at a busy restaurant; if a customer shouts a ridiculously long order, the waiter can get overwhelmed and drop all the plates! In this case, that oversized buffer can cause the FTP server to crash and open the door for unauthorized code execution. This buffer overflow vulnerability occurs in the LIST command of Konica Minolta FTP Utility 1.0, allowing attackers to send oversized input that overwrites system registers, leading to crashes and code execution.

What to do

An attacker exploiting this vulnerability could not only crash your FTP server but could potentially gain unauthorized access to execute commands, leading to a complete system takeover. This is a serious threat that could disrupt operations and compromise sensitive data! To protect your systems, patch the Konica Minolta FTP Utility to the latest version immediately. Ensure buffer limits are set appropriately and monitor for any unusual FTP traffic. Regularly audit your systems to catch any potential vulnerabilities early! You’ve got this! With prompt action, you can keep your systems secure and running smoothly! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00668 · 51.3th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-03T22:01Z
EPSS history
Timeline
  • 03 FEB 22:01Z
    Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service
    cvelistv5