CVE-2020-37139 - CVE House

Back to Database

Status published Medium CVE-2020-37139

Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service

4.6 CVSS

Vulnerability Description

Odin Secure FTP Expert 7.6.3 contains a local denial of service vulnerability that allows attackers to crash the application by manipulating site information fields. Attackers can generate a buffer overflow by pasting 108 bytes of repeated characters into connection fields, causing the application to crash.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-37139

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Ivan Marmolejo

References

Affected Vendor

Odin-Secure-Ftp-Expert

View all reports →

Affected Software

Odin Secure FTP Expert

Vulnerable Versions:

7.6.3

Timeline

Official Publish: February 5th, 2026

Last Modified: February 5th, 2026

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1498 Network Denial of Service

T1190 Exploit Public-Facing Application

T1562 Impair Defenses

Defense Evasion

T1046 Network Service Discovery