MEDIUM🇵🇱 Wersja polska

CVE-2020-37170

CVSS 6.7v4.0pub. 2026-02-07upd. 2026-02-19

TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy address configuration that allows local attackers to crash the application. Attackers can overwrite the address field with 3000 bytes of arbitrary data to trigger an application crash and prevent normal program functionality.

CVSS Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • Raimersoft Tapinradio

    APP
    Raimersoft
    ≤ 2.12.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2020-37171MEDIUM6.7ten sam produkt

TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration t...

CVE-2020-36949MEDIUM6.7ten sam produkt

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows att...

CVE-2019-25583MEDIUM6.9ten sam vendor

RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that allows local attackers...

CVE-2019-25584MEDIUM6.9ten sam vendor

RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that al...