CVE-2020-37201
Published: 11 February 2026
Summary
CVE-2020-37201 is a medium-severity Classic Buffer Overflow (CWE-120) vulnerability in Nsasoft Netsharewatcher. Its CVSS base score is 4.6 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 4.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2020-37201 is a buffer overflow vulnerability (CWE-120) affecting NetShareWatcher version 1.5.8.0, specifically in the registration name input field. The issue allows attackers to crash the application by generating and pasting a 1000-character payload into the 'Name' field.
According to its CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), the vulnerability can be exploited remotely over the network with low attack complexity, requiring no privileges or user interaction. Attackers can achieve a denial of service by crashing the application, with high impact to availability but no impact to confidentiality or integrity.
References include a proof-of-concept exploit on Exploit-DB (ID 47848), a VulnCheck advisory detailing the NetShareWatcher name denial-of-service, and the vendor site at nsauditor.com. No specific patch or mitigation details are outlined in the provided information.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2020-31187
Vulnerability details
NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in input field directly enables remote application crash for DoS via exploitation of software vulnerability.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents buffer overflow by validating length and content of registration name inputs to reject oversized payloads like the 1000-character exploit.
Requires timely remediation of known flaws such as CVE-2020-37201 through patching or updating NetShareWatcher to eliminate the buffer overflow vulnerability.
Implements memory protections like stack canaries and DEP to detect and mitigate buffer overflows in the registration name field, preventing application crashes.