CVE-2020-37070

CRITICAL

CloudMe 1.11.2 - Remote Code Execution via Crafted Network Packets

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-37070. PoCs published by Xenofon Vassilakopoulos.

AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in CloudMe 1.11.2 to achieve remote code execution via a reverse TCP shell. It uses ROP chains to bypass DEP and ASLR, targeting a specific SEH overwrite.

Description

CloudMe 1.11.2 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code through crafted network packets. Attackers can exploit the vulnerability by sending a specially crafted payload to the CloudMe service running on port 8888, enabling remote code execution.

Exploits (1)

exploitdb WORKING POC
by Xenofon Vassilakopoulos · textlocalwindows
https://www.exploit-db.com/exploits/48499

This exploit leverages a buffer overflow vulnerability in CloudMe 1.11.2 to achieve remote code execution via a reverse TCP shell. It uses ROP chains to bypass DEP and ASLR, targeting a specific SEH overwrite.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: CloudMe 1.11.2
No auth needed
Prerequisites: CloudMe service running on target · Network access to port 8888
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/48499
Various Sources product
https://www.cloudme.com/en

Scores

CVSS v3 9.8
EPSS 0.0045
EPSS Percentile 35.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-120
Status published
Products (1)
CloudMe/CloudMe 1.11.2
Published Feb 03, 2026
Tracked Since Feb 18, 2026