CVE-2020-37085
HIGHVirtualTablet Server 3.0.2 - DoS
Title source: llmDescription
VirtualTablet Server 3.0.2 contains a denial of service vulnerability that allows attackers to crash the service by sending oversized string payloads through the Thrift protocol. Attackers can exploit the vulnerability by sending a long string to the send_say() method, causing the server to become unresponsive.
Exploits (1)
Scores
CVSS v3
7.5
EPSS
0.0006
EPSS Percentile
17.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-770
Status
published
Products (1)
SunnySideSoft/VirtualTablet Server
3.0.2
Published
Feb 03, 2026
Tracked Since
Feb 18, 2026