Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2020-37075: LanSend 3.2: Malicious File Import Can Run Harmful Code Remotely

CVE-2020-37075 · published 9 months ago

Summary

If hackers trick LanSend into importing a special file, they can run their own code on your computer. This could allow them to take control of your system or steal data. Update to the latest version of LanSend to fix this issue.

Original advisory text

LanSend 3.2 contains a buffer overflow vulnerability in the Add Computers Wizard file import functionality that allows remote attackers to execute arbitrary code. Attackers can craft a malicious payload file to trigger a structured exception handler (SEH) overwrite and execute shellcode when importing computers from a file.

References

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker full control

Severity

8.4 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-120Classic Buffer Overflow

Timeline

Published3 Feb 2026

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2020-37075 · NVD

Track software like this

Free during beta