CVE-2020-36995

Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service

CVSS 4.6 MEDIUMEPSS 0.4%CWE-120

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 4.6EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 jan 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal functionality.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Produtos afetados

telnet-lite · Mocha Telnet Lite for iOS

Referências

https://apps.apple.com/us/app/telnet-lite/id286893976 https://www.exploit-db.com/exploits/48728 https://www.vulncheck.com/advisories/mocha-telnet-lite-for-ios-user-denial-of-service