CVE-2020-1939: The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of…

PriorityP345critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

2.50%

82.9th percentile

The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of these, ftpd, had a NULL pointer dereference bug. The NuttX RTOS itself is not affected. Users of the optional apps repository are affected only if they have enabled ftpd. Versions 6.15 to 8.2 are affected.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apache	nuttx	6.15 – 8.2	—

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.05.1MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.