Record summary

CVE-2020-37131 has a selected CVSS score of 6.7 (medium); EIP currently links 1 catalogued exploit.

Description

Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting a specially crafted registration key. Attackers can generate a payload of 1000 bytes of repeated characters and paste it into the 'Key' input field to trigger the application crash.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 5, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion rangeStatus
CVE List4.2.2.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBProduct Key Explorer 4.2.2.0 - 'Key' Denial of Service (PoC)ExploitDB exploitby 0xMoHassanNot analyzed1 file
ExploitDB

PoC details

References

4