Record summary

CVE-2020-37075 has a selected CVSS score of 8.4 (high); EIP currently links 1 catalogued exploit.

Description

LanSend 3.2 contains a buffer overflow vulnerability in the Add Computers Wizard file import functionality that allows remote attackers to execute arbitrary code. Attackers can craft a malicious payload file to trigger a structured exception handler (SEH) overwrite and execute shellcode when importing computers from a file.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 4, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion rangeStatus
CVE List3.2affected

Proofs of concept

1

Catalogued exploits

ExploitDBLanSend 3.2 - Buffer Overflow (SEH)ExploitDB exploitby gurbanliNot analyzed1 file
ExploitDB

PoC details

References

4