Vulnerability record · CVE-2020-5183 · published 8 January 2020

CVE-2020-5183: Ftpgetter null pointer dereference vulnerability

Ftpgetter · Ftpgetter

FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string to the application. This memory corruption bug can possibly be classified as a NULL pointer dereference.

7.5 CVSS 3.1 High EPSS 2.0% · top 19.9% CWE-476 · NULL pointer dereferenceCWE-787 · Out-of-bounds write

7.5CVSS 3.1 base score, v2 5.0

2.0%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References, 4 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Ftpgetter Ftpgetter

References

Link	Tags
http://packetstormsecurity.com/files/155832/FTPGetter-Professional-5.97.0.223-Denial-Of-Service.html	ExploitThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/47871	ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/155832/FTPGetter-Professional-5.97.0.223-Denial-Of-Service.html	ExploitThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/47871	ExploitThird Party AdvisoryVDB Entry

Track CVE-2020-5183 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-9760FTPGetter Standard memory corruption via crafted FTP server responsesFTPGetter Standard v.5.97.0.177 has an out-of-bounds write (CWE-787) triggered by crafted responses from an attacker-controlled FTP server. Long resp…EPSS 53%analysed14 Mar 2019 9.3CVE-2010-3103Ftpgetter path traversal vulnerabilityDirectory traversal vulnerability in FTPGetter Team FTPGetter 3.51.0.05, and probably earlier versions, allows remote FTP servers to write arbitrary …EPSS 1.6%21 Aug 2010 6.2CVE-2026-21525Windows Remote Access Connection Manager null pointer dereference DoSWindows Remote Access Connection Manager contains a null pointer dereference (CWE-476) that lets an unauthorized attacker deny service locally. The f…KEVEPSS 4.8%analysed10 Feb 2026

Source: NIST National Vulnerability Database (record CVE-2020-5183), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.