CVE-2020-36995

Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service

CVSS 4.6 MEDIUMEPSS 0.4%CWE-120

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4.6EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

29 Jan 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal functionality.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Affected products

telnet-lite · Mocha Telnet Lite for iOS

References

https://apps.apple.com/us/app/telnet-lite/id286893976 https://www.exploit-db.com/exploits/48728 https://www.vulncheck.com/advisories/mocha-telnet-lite-for-ios-user-denial-of-service