CyberSec.Space Logo
Back to CVE Browser

CVE-2020-37164

MEDIUM
6.2
CVSS Severity Score
EPSS Score0.0980%
EPSS Percentile5.55th
PublishedFeb 7, 2026
Last ModifiedFeb 19, 2026

Vulnerability Description

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license entry field to trigger an application crash.

Affected Platforms (CPE)

📦
Celestialsoftware

Absolutetelnet

<= 11.12

References & Advisories

🔗 https://www.celestialsoftware.net/
🔗 https://www.exploit-db.com/exploits/48005
🔗 https://www.vulncheck.com/advisories/absolutetelnet-license-entry-denial-of-service

Related Vulnerabilities

CVE-2003-109010.0

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

CVE-2020-371656.2

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying ...

CVE-2020-371666.2

AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to cr...

CVE-2021-477645.5

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulati...