CVE-2020-37042:

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature, allowing arbitrary code execution.

Score
A numerical rating that indicates how dangerous this vulnerability is.

8.4High

Published Date:Jan 30, 2026
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:0.0
EPSS Percentile:2%

Exploitability

Score:2.5
Attack Vector:LOCAL
Attack Complexity:LOW
Privileges Required:NONE
User Interaction:NONE
Scope:UNCHANGED

Impact

Score:5.9
Confidentiality Impact:HIGH
Integrity Impact:HIGH
Availability Impact:HIGH

Description Preview

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature, allowing arbitrary code execution.

Overview

The vulnerability in Frigate Professional 3.36.0.9 is classified as a buffer overflow (CWE-120). It has a CVSS v3.1 base score of 8.4, indicating high severity. The attack vector is local, requiring no privileges or user interaction. The vulnerability impacts confidentiality, integrity, and availability, all rated as high. This suggests that successful exploitation could lead to complete compromise of the affected system's security.

Remediation

While specific remediation steps are not provided in the CVE information, general best practices for addressing buffer overflow vulnerabilities include:
1. Updating the software to a patched version if available.
2. Implementing input validation and sanitization to prevent buffer overflows.
3. Using memory-safe programming practices and languages.
4. Employing address space layout randomization (ASLR) and data execution prevention (DEP) techniques.
5. Regularly auditing and testing the application for similar vulnerabilities.
Users and administrators of Frigate Professional 3.36.0.9 should monitor for updates from the vendor and apply them promptly when available.