Description

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the Pack File feature that allows attackers to execute arbitrary code by overflowing the 'Archive To' input field. Attackers can craft a malicious payload that overwrites the Structured Exception Handler (SEH) and uses an egghunter technique to execute a reverse shell payload.

INFO

Published Date :

2026-01-29T14:28:27.807Z

Last Modified :

2026-03-05T01:27:21.742Z

Source :

VulnCheck
AFFECTED PRODUCTS

The following products are affected by CVE-2020-37001 vulnerability.

Vendors Products
Frigate
  • Frigate
Frigate3
  • Frigate Professional

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact