PT-2026-6816 · Unknown · Asc Timetables

Ismael Nava · CVE-2020-37109 · Published 2026-02-06 · Updated 2026-02-07

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions aSc TimeTables version 2020.11.4

Description The application can be crashed, leading to a denial of service, by overwriting the Subject title field with a large buffer. An attacker can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and potential instability. The vulnerable field is the Subject title.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-37109

Affected Products

Asc Timetables

References · 6

• 🔥 https://exploit-db.com/exploits/48133 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37109 · Security Note
• https://t.me/cveNotify/151227 · Telegram Post
• https://t.me/CVEtracker/43979 · Telegram Post
• https://asctimetables.com/#!/home · Note
• https://vulncheck.com/advisories/asc-timetables-denial-of-service · Note