CVE-2020-37070CWE-120

CloudMe 1.11.2 - Buffer Overflow (SEH,DEP,ASLR)

High · published February 3, 2026

CVSS v4.0
8.6
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

🚨 A crafty little buffer overflow lurks in CloudMe 1.11.2! Remote attackers can send specially crafted packets on port 8888, potentially executing arbitrary code. 🔥 Think of it like a delivery person slipping a forged package through a security checkpoint, which then allows them to take control of the entire building—super sneaky and absolutely devastating! 🚪📦 If exploited, attackers could execute arbitrary code on your system, leading to unauthorized access, data breaches, or even taking full control over the CloudMe service! That’s a nightmare scenario for any user. ⚡

Put simply

Think of it like a delivery person slipping a forged package through a security checkpoint, which then allows them to take control of the entire building—super sneaky and absolutely devastating! 🚪📦 This vulnerability arises from a buffer overflow condition in CloudMe, allowing attackers to send specially crafted network packets to the service, leading to remote code execution on the affected system.

What to do

If exploited, attackers could execute arbitrary code on your system, leading to unauthorized access, data breaches, or even taking full control over the CloudMe service! That’s a nightmare scenario for any user. ⚡ To safeguard against this vulnerability, upgrade CloudMe to version 1.11.3 or later immediately. Additionally, consider implementing network firewall rules to restrict access to port 8888 unless absolutely necessary. 🛡️ You've got this! Follow these steps to lock down your CloudMe instance and keep your data safe! ✨

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00526 · 43.7th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-03T22:01Z
EPSS history
Timeline
  • 03 FEB 22:01Z
    CloudMe 1.11.2 - Buffer Overflow (SEH,DEP,ASLR)
    cvelistv5