CVE-2020-37210 MEDIUM

CVE-2020-37210: SpotIE 2.9.5 - 'Key' Denial of Service

Vendor Nsasoft

Product Nsauditor SpotIE

Weakness CWE-120

Published February 11, 2026

Last update February 12, 2026

View on NVD All CVEs

CVSS base score

4.6/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.

Key dates

02Disclosure timeline

February 11, 2026 CVE published

February 12, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-37210 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/120.html

Related vulnerabilities

04Related CVE

CVE-2025-6150 TOTOLINK X15 HTTP POST Request formMultiAP buffer overflow CVE-2024-7829 D-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflow CVE-2022-4856 Modbus Tools Modbus Slave mbs File mbslave.exe buffer overflow CVE-2024-33030 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance CVE-2025-68137 EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop