CVE-2020-37075CWE-120

LanSend 3.2 - Buffer Overflow (SEH)

High · published February 3, 2026

CVSS v4.0
8.4
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

🚨 A seemingly innocent file import feature can turn into a hacker's playground! This buffer overflow in LanSend 3.2 is an open invitation for remote attackers to execute arbitrary code. 🔥 Think of the Add Computers Wizard as a restaurant's kitchen, where the chef prepares meals based on incoming orders. If the order slips aren't checked and a rogue order comes in that's too big, it could overflow the kitchen's capabilities, causing chaos! In this case, an attacker could craft a malicious payload that, once imported, can overwrite critical parts of the system. The result? They'd gain the ability to run arbitrary shellcode, leading to total control over the affected system. Absolutely devastating!

Put simply

Think of the Add Computers Wizard as a restaurant's kitchen, where the chef prepares meals based on incoming orders. If the order slips aren't checked and a rogue order comes in that's too big, it could overflow the kitchen's capabilities, causing chaos! This vulnerability stems from a buffer overflow during the file import process in the Add Computers Wizard, allowing structured exception handler (SEH) overwriting, which can be exploited to execute arbitrary code.

What to do

In this case, an attacker could craft a malicious payload that, once imported, can overwrite critical parts of the system. The result? They'd gain the ability to run arbitrary shellcode, leading to total control over the affected system. Absolutely devastating! Patch to version 3.2.1 immediately to close this vulnerability. Ensure to review file import practices and implement strict file validation to prevent malicious payloads from sneaking in. You've got this! Follow these steps, and you'll have your systems locked down in no time. 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00526 · 43.7th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-03T22:01Z
EPSS history
Timeline
  • 03 FEB 22:01Z
    LanSend 3.2 - Buffer Overflow (SEH)
    cvelistv5