Record summary

CVE-2020-37203 has a selected CVSS score of 4.6 (medium); EIP currently links 1 catalogued exploit.

Description

Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the registration code input. Attackers can create a specially crafted text file and paste it into the 'Name and Key' field to trigger an application crash.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 12, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion rangeStatus

Nsauditor Office Product Key Finder

Browse Nsasoft / Nsauditor Office Product Key Finder
CVE List1.5.4affected

Proofs of concept

1

Catalogued exploits

ExploitDBOffice Product Key Finder 1.5.4 - Denial of Service (PoC)ExploitDB exploitby GokkulrajNot analyzed1 file
ExploitDB

PoC details

References

4