CVE-2020-36995

Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service

CVSS 4.6 MEDIUMEPSS 0.4%CWE-120

Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal functionality.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Produtos afetados

telnet-lite · Mocha Telnet Lite for iOS

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://apps.apple.com/us/app/telnet-lite/id286893976 https://www.exploit-db.com/exploits/48728 https://www.vulncheck.com/advisories/mocha-telnet-lite-for-ios-user-denial-of-service