Question 1

What is this vulnerability? (Essence + Consequences)

Accepted Answer

🚨 **Essence**: Buffer Overflow in LizardSystems LanSend 3.2.
💥 **Consequences**: Arbitrary Code Execution. The 'Add Computer Wizard' file import feature is vulnerable.…

Question 2

Root Cause? (CWE/Flaw)

Accepted Answer

🛡️ **Root Cause**: **CWE-120** (Buffer Copy without Checking Size of Input).
🔍 **Flaw**: The application fails to validate input size during file import in the wizard.…

Question 3

Who is affected? (Versions/Components)

Accepted Answer

🏢 **Vendor**: LizardSystems.
📦 **Product**: LanSend (LAN Message Sender).
📌 **Affected Version**: **v3.2** specifically.
⚠️ **Scope**: Local Area Network tools used for messaging.

Question 4

What can hackers do? (Privileges/Data)

Accepted Answer

👑 **Privileges**: **High**.
📊 **Impact**: CVSS Score indicates **Critical** impact.
🔓 **Capabilities**: Complete compromise of Confidentiality, Integrity, and Availability.…

Question 5

Is exploitation threshold high? (Auth/Config)

Accepted Answer

🔓 **Threshold**: **Low**.
🚫 **Auth**: No authentication required (PR:N).
🌐 **Network**: Network accessible (AV:N).
👀 **UI**: No user interaction needed (UI:N).
🎯 **AC**: Low complexity.…

Question 6

Is there a public Exp? (PoC/Wild Exploitation)

Accepted Answer

💣 **Public Exploit**: **YES**.
🔗 **Source**: ExploitDB ID **48461**.
📢 **Advisory**: VulnCheck has published a detailed advisory on the SEH buffer overflow.…

Question 7

How to self-check? (Features/Scanning)

Accepted Answer

🔍 **Self-Check**:
1. Scan for **LizardSystems LanSend** services.
2. Verify version is **3.2**.
3. Check for the 'Add Computer Wizard' file import functionality.
4.…

Question 8

Is it fixed officially? (Patch/Mitigation)

Accepted Answer

🩹 **Patch Status**: Data does not explicitly list a patch date.
📅 **Published**: 2026-02-03 (Future date in data, implies recent/ongoing).…

Question 9

What if no patch? (Workaround)

Accepted Answer

🛑 **No Patch Workaround**:
1. **Disable** the 'Add Computer Wizard' file import feature if possible.
2. **Restrict Network Access**: Block ports used by LanSend at the firewall.
3.…

Question 10

Is it urgent? (Priority Suggestion)

Accepted Answer

🔥 **Urgency**: **CRITICAL**.
🚨 **Priority**: **P0 / Immediate Action**.
💡 **Reason**: Remote, unauthenticated, no UI interaction needed, and public exploits exist.…

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2020-37075 — AI Deep Analysis Summary

Q1What is this vulnerability? (Essence + Consequences)

Q2Root Cause? (CWE/Flaw)

Q3Who is affected? (Versions/Components)

Q4What can hackers do? (Privileges/Data)

Q5Is exploitation threshold high? (Auth/Config)

Q6Is there a public Exp? (PoC/Wild Exploitation)

Q7How to self-check? (Features/Scanning)

Q8Is it fixed officially? (Patch/Mitigation)

Q9What if no patch? (Workaround)

Q10Is it urgent? (Priority Suggestion)

Continue exploring