How to fix CVE-2020-37143?

Within 24 hours: Inventory all ProficySCADA iOS deployments and restrict network access to trusted sources only. Within 7 days: Implement network segmentation to limit which systems can communicate with the application; evaluate switching to alternative HMI interfaces where available. Within 30 days: Contact Proficy for patch availability timeline and develop a migration plan if patch remains unavailable.

Is Scada affected by CVE-2020-37143?

ProficySCADA iOS users are vulnerable to a denial-of-service attack that can crash the application through malicious password input, disrupting operational visibility and control of industrial systems.

CVE-2020-37143

HIGH

2026-02-05 [email protected]

7.5

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Feb 05, 2026 - 20:47 vuln.today

Public exploit code

CVE Published

Feb 05, 2026 - 17:16 nvd

HIGH 7.5

Description

ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the password input field. Attackers can overwrite the password field with 257 bytes of repeated characters to trigger an application crash and prevent successful authentication.

Analysis

ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the password input field. [CVSS 7.5 HIGH]

Technical Context

This vulnerability (CWE-770: Allocation of Resources Without Limits or Throttling) ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the password input field. Attackers can overwrite the password field with 257 bytes of repeated characters to trigger an application crash and prevent successful authentication.

Affected Products

ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that

Remediation

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.1

CVSS: +38

POC: +20

CVE-2020-37143 vulnerability details – vuln.today

Back

CVE-2020-37143

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

CVE-2020-37143

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code