CVE-2020-37122CWE-121

SpotFTP-FTP Password Recover 2.4.8 - Denial of Service

Medium · published February 6, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

⚠️ Just 1000 characters can bring down an application! By inputting a cleverly crafted registration code, attackers can crash SpotFTP-FTP Password Recover 2.4.8 with a simple buffer overflow. Think of it like trying to stuff an entire set of encyclopedias into a small desk drawer — eventually, it just can't take any more and collapses! In this case, the application fails under the weight of too much data at once. The potential fallout? An attacker could cause the application to crash, which could disrupt service and frustrate users. While this isn't a complete takeover, it's definitely an unwelcome surprise that could lead to downtime and a scramble to recover. 💥

Put simply

Think of it like trying to stuff an entire set of encyclopedias into a small desk drawer — eventually, it just can't take any more and collapses! In this case, the application fails under the weight of too much data at once. This vulnerability arises from a buffer overflow in SpotFTP-FTP Password Recover 2.4.8. When a malicious actor inputs a registration code that exceeds the buffer's capacity, the application crashes, leading to a denial of service.

What to do

The potential fallout? An attacker could cause the application to crash, which could disrupt service and frustrate users. While this isn't a complete takeover, it's definitely an unwelcome surprise that could lead to downtime and a scramble to recover. 💥 To fix this vulnerability, update SpotFTP-FTP Password Recover to the latest version immediately. Additionally, implement input validation to ensure that registration codes are limited to a safe length. Regularly monitor your application for any unusual activity! You've got this! With these tweaks, you'll keep your application running smoothly and securely. 🛡️

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00451 · 38.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-02-06T23:14Z
EPSS history
Timeline
  • 06 FEB 23:14Z
    SpotFTP-FTP Password Recover 2.4.8 - Denial of Service
    cvelistv5