CVE-2020-37025:

Buffer overflow vulnerability in Port Forwarding Wizard 4.8.0 allows local code execution via the Register feature.

Score
A numerical rating that indicates how dangerous this vulnerability is.

8.4High

Published Date:Jan 30, 2026
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:0.0
EPSS Percentile:2%

Exploitability

Score:2.5
Attack Vector:LOCAL
Attack Complexity:LOW
Privileges Required:NONE
User Interaction:NONE
Scope:UNCHANGED

Impact

Score:5.9
Confidentiality Impact:HIGH
Integrity Impact:HIGH
Availability Impact:HIGH

Description Preview

Buffer overflow vulnerability in Port Forwarding Wizard 4.8.0 allows local code execution via the Register feature.

Overview

The vulnerability in Port Forwarding Wizard 4.8.0 is a classic buffer overflow issue, categorized as CWE-120. It allows local attackers to execute arbitrary code by exploiting the Register feature. The attack vector is local, requiring no special privileges or user interaction. The vulnerability impacts confidentiality, integrity, and availability, all rated as high. This suggests that successful exploitation could lead to complete system compromise. The attack complexity is low, indicating that it may not be particularly difficult for an attacker to exploit this vulnerability once they have local access to the system.

Remediation

As of the vulnerability disclosure, no official patch or update has been mentioned. However, users and administrators can take the following steps to mitigate the risk:
1. Upgrade to a newer version of Port Forwarding Wizard if available.
2. Limit access to the affected system to trusted users only.
3. Implement additional security measures such as address space layout randomization (ASLR) and data execution prevention (DEP) if not already in place.
4. Monitor systems for unusual activity or unauthorized access attempts.
5. Consider using alternative port forwarding solutions until a fix is available.
It is crucial to keep an eye on the official Port Forwarding Wizard website and security bulletins for any updates or patches addressing this vulnerability.