Buffer Overflow in 10-Strike Bandwidth Monitor Enables Remote Code Execution

Publication date: 2026-01-30

Last updated on: 2026-01-30

Assigner: VulnCheck

Description

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling remote code execution and launching arbitrary system commands.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-30

Last Modified

2026-01-30

Generated

2026-07-06

AI Q&A

2026-01-31

EPSS Evaluated

2026-07-05

NVD

CVE-2020-37043

EUVD

EUVD-2020-30935

Affected Vendors & Products

Vendor	Product	Version / Range
10-strike	bandwidth_monitor	3.9

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow in 10-Strike Bandwidth Monitor 3.9 that allows attackers to bypass security protections such as SafeSEH, ASLR, and DEP by sending specially crafted input to the application's registration key input. Exploiting this flaw enables remote code execution and the ability to run arbitrary system commands.

Impact Analysis

The vulnerability can lead to remote code execution on the affected system, allowing attackers to execute arbitrary system commands. This can result in unauthorized control over the system, potential data breaches, disruption of services, and compromise of system integrity.

Hi! I’m here to help you understand CVE-2020-37043. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70