CVE-2020-37139CWE-770

Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service

Medium · published February 5, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

⚠️ A mere 108 characters can send Odin Secure FTP Expert crashing down! Just like a party balloon that pops with too much air, this local denial of service vulnerability can make the application completely unusable. 😲 Think of Odin Secure FTP Expert like a crowded restaurant trying to handle an overwhelming dinner rush. If too many customers try to order at once without proper management, the kitchen can’t keep up, leading to chaos and shut-downs! If an attacker crafts a specific input, they could cause the application to crash, disrupting operations and potentially halting any ongoing file transfers. This means your shiny FTP server is down, and you might be left scrambling to get it up and running again.

Put simply

Think of Odin Secure FTP Expert like a crowded restaurant trying to handle an overwhelming dinner rush. If too many customers try to order at once without proper management, the kitchen can’t keep up, leading to chaos and shut-downs! This local denial of service vulnerability (CVE-2020-37139) allows attackers to cause a buffer overflow in Odin Secure FTP Expert by entering 108 bytes of repeated characters into connection fields, leading to a crash of the application.

What to do

If an attacker crafts a specific input, they could cause the application to crash, disrupting operations and potentially halting any ongoing file transfers. This means your shiny FTP server is down, and you might be left scrambling to get it up and running again. To protect your systems, update Odin Secure FTP Expert to the latest version that patches this vulnerability. Additionally, audit any input validation rules to ensure they can handle unexpected data gracefully. Keep your software up to date regularly! You've got this! Follow these steps, and you will keep your FTP server resilient and secure! 🛡️

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00207 · 10.3th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-02-05T16:13Z
EPSS history
Timeline
  • 05 FEB 16:13Z
    Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service
    cvelistv5