Cyber Resilience

CVE-2020-36995

MediumPublic PoC

Published: 29 January 2026

Published
29 January 2026
Modified
15 April 2026
KEV Added
Patch
CVSS Score v4 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0002 5.2th percentile
Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2020-36995 is a medium-severity Classic Buffer Overflow (CWE-120) vulnerability in Apple (inferred from references). Its CVSS base score is 4.6 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 5.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2020-36995 is a denial-of-service vulnerability in Mocha Telnet Lite for iOS version 4.2, stemming from improper handling of user configuration input (CWE-120: Buffer Copy without Checking Size of Input). The flaw allows attackers to crash the application by overwriting the 'User' field with 350 bytes of repeated characters, disrupting normal functionality. It carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Remote attackers require no privileges or user interaction to exploit this vulnerability over the network with low complexity. Successful exploitation triggers an application crash, rendering Mocha Telnet Lite inoperable and denying service to the affected user.

Advisories from Vulncheck detail the vulnerability and proof-of-concept exploit, while Exploit-DB hosts a corresponding exploit (ID 48728). The application page on the Apple App Store provides version context but no patch information is specified in available references.

EU & UK References

Vulnerability details

Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an…

more

application crash and prevent normal functionality.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Buffer overflow in client app input handling directly enables application crash via crafted network/config data, matching T1499.004 Application or System Exploitation for DoS.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-20115Shared CWE-120
CVE-2020-37205Shared CWE-120
CVE-2026-28875Shared CWE-120
CVE-2020-37194Shared CWE-120
CVE-2020-37180Shared CWE-120
CVE-2024-24419Shared CWE-120
CVE-2019-25353Shared CWE-120
CVE-2026-30075Shared CWE-120
CVE-2020-37213Shared CWE-120
CVE-2021-47798Shared CWE-120

Affected Assets

Apple
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

SI-10 mandates validation of all user inputs, including the 'User' field configuration, to prevent buffer overflows from oversized inputs like 350 bytes of repeated characters.

prevent

SI-11 ensures graceful error handling for invalid inputs, avoiding application crashes from improper buffer copy without size checks.

prevent

SC-5 limits the effects of denial-of-service events, such as remote network-triggered application crashes in Mocha Telnet Lite.

References