CVE-2020-36995

Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service

CVSS 4.6 MEDIUMEPSS 0.4%CWE-120

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 4.6EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 ene 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal functionality.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Productos afectados

telnet-lite · Mocha Telnet Lite for iOS

Referencias

https://apps.apple.com/us/app/telnet-lite/id286893976 https://www.exploit-db.com/exploits/48728 https://www.vulncheck.com/advisories/mocha-telnet-lite-for-ios-user-denial-of-service