VULNERABILITY INTELLIGENCE

CVE-2020-37171

CVSS score6.2 MEDIUM

EPSS probability0.26%

CISA KEVNot currently listed

Published2026-02-07

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration that allows local attackers to crash the application. Attackers can overwrite the username field with 10,000 bytes of arbitrary data to trigger an application crash and prevent normal program functionality.

Weakness classification

disclosure@vulncheck.com: CWE-120

Primary references

disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
disclosure@vulncheck.com — Product
disclosure@vulncheck.com — Third Party Advisory