CVE-2020-36881

High · 7.8

CVSS

7.8

EPSS

0.4%

Published

Dec 5, 2025

CISA due date

—

The record

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field.

Affected packages

Ecosystem	Package	Introduced	Fixed