What is the CVSS score of CVE-2020-36881?

CVE-2020-36881 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Diskboss are affected by CVE-2020-36881?

DiskBoss 7.7.14 contains a critical local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting the input directory feature.

Is there a public PoC exploit available for CVE-2020-36881?

Yes, a public proof-of-concept exploit is available for CVE-2020-36881. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2020-36881?

Within 24 hours: Identify all systems running DiskBoss 7.7.14 and restrict access to trusted users only; disable the 'Add Input Directory' feature if possible and communicate risk to affected teams. Within 7 days: Implement network segmentation to isolate affected systems; monitor for exploitation attempts in logs; evaluate alternative software solutions. Within 30 days: Upgrade to a patched version when available from vendor; if no patch emerges, conduct a formal risk assessment to determine if DiskBoss should be decommissioned or replaced.

Diskboss CVE-2020-36881

EUVD-2020-30823 HIGH

Buffer Overflow (CWE-119)

2025-12-05 disclosure@vulncheck.com

Buffer Overflow RCE Diskboss

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 17:08 euvd

EUVD-2020-30823

Analysis Generated

Mar 15, 2026 - 17:08 vuln.today

PoC Detected

Dec 10, 2025 - 15:10 vuln.today

Public exploit code

CVE Published

Dec 05, 2025 - 18:15 nvd

HIGH 7.8

DescriptionCVE.org

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field.

Analysis

Technical ContextAI

A buffer overflow occurs when data written to a buffer exceeds its allocated size, potentially overwriting adjacent memory and corrupting program state.