Record summary

CVE-2020-37139 has a selected CVSS score of 4.6 (medium); EIP currently links 1 catalogued exploit.

Description

Odin Secure FTP Expert 7.6.3 contains a local denial of service vulnerability that allows attackers to crash the application by manipulating site information fields. Attackers can generate a buffer overflow by pasting 108 bytes of repeated characters into connection fields, causing the application to crash.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 5, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion rangeStatus
CVE List7.6.3affected

Proofs of concept

1

Catalogued exploits

ExploitDBOdin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (PoC)ExploitDB exploitby Ivan MarmolejoNot analyzed1 file
ExploitDB

PoC details

References

4