CVE Feed

    Dashboard / CVE / CVE-2020-37166

    CVE-2020-37166

    AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate.

    Published:Feb 6, 2026
    Last Modified:Feb 19, 2026
    EPS:Feb 6, 2026
    EPSS Score:0.00005
    CVSS Score:6.2

    Affected Products

    Vendor
    Celestial Software
    Product
    Absolutetelnet
    Vendor
    Celestialsoftware
    Product
    Absolutetelnet

    Exploits

    https://www.exploit-db.com/exploits/48010

    Related CVEs

    CVE-2020-37165 (CVSS 6.7) — AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the appli…
    CVE-2020-37164 (CVSS 6.7) — AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the appli…
    CVE-2021-47765 (CVSS 6.7) — AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the appli…
    CVE-2021-47764 (CVSS 6.7) — AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the appli…
    CVE-2003-1090 (CVSS 10) — Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a lon…
    CVE-2003-0046 (CVSS 4.6) — AbsoluteTelnet SSH2 client does not clear logon credentials from memory, including plaintext passwords, which …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High