CVE-2020-37143CWE-770

ProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service

Medium · published February 5, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

⚠️ A tiny 257-byte input can crash the entire application! That's right, attackers can manipulate the password field in ProficySCADA for iOS, turning a simple login into a total application meltdown. 🔥 Think of it like a restaurant where the cashier's register gets jammed with too many receipts; one wrong input can halt the whole checkout process and send customers packing. The app just can't handle the overload! This denial of service vulnerability means that users may find themselves locked out when the application crashes at the worst possible moment. If attackers exploit this flaw, they can effectively halt operations, making it a significant inconvenience for anyone relying on this software.

Put simply

Think of it like a restaurant where the cashier's register gets jammed with too many receipts; one wrong input can halt the whole checkout process and send customers packing. The app just can't handle the overload! CVE-2020-37143 lets attackers crash the ProficySCADA application by flooding the password input with excessive repetitive characters, exceeding the expected input buffer and causing a denial of service.

What to do

This denial of service vulnerability means that users may find themselves locked out when the application crashes at the worst possible moment. If attackers exploit this flaw, they can effectively halt operations, making it a significant inconvenience for anyone relying on this software. Developers should patch ProficySCADA to version 5.0.25921 or later, which addresses this vulnerability. Additionally, implement input validation to prevent similar attacks in the future, ensuring users can log in smoothly without interruption. You've got this! By taking these steps, you'll keep your application running smoothly and secure. 🛡️

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00379 · 30.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-02-05T16:13Z
EPSS history
Timeline
  • 05 FEB 16:13Z
    ProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service
    cvelistv5